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|^ (57) Abstract: Methods and systems are provided for displaying a fraud potential indicator graphical interface. In some embod- 
iments, at least two fraud potential indicators may be displayed for at least two fraud potential detection techniques for business 
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transaction or fraud potential indicator selected. For example, a fraud potential indicator may be selected to display information 
about the fraud potential detection technique that assessed the selected fraud potential indicator. In some embodiments, tabs may be 
selected to display additional information and/or organized lists of business transactions and fraud potential indicators. 



WO 2005/048045 A2 I ill III III II I II II I II II I II II I III I II III III I II III I 



SI, SK, TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, 
GW, ML, MR, NE, SN, TD, TG). 

Published: 

— without international search report and to be republished 
upon receipt of that report 



For two -letter codes and other abbreviations, refer to the "Guid- 
ance Notes on Codes and Abbreviations" appearing at the begin- 
ning of each regular issue of the PCT Gazette. 



WO 2005/048045 



PCT/US2004/036792 



TITLE: FRAUD POTENTIAL INDICATOR GRAPHICAL INTERFACE 

BACKGROUND OF THE INVENTION 

5 1. Field of the Invention 

The present invention generally relates to detecting the potential for fraud. In particular, embodiments 
relate to systems and methods of assessing fraud potential in multiple industries. 

2. Description of the Related Art 

10 While fraud affects many companies, it may be difficult to detect. For example, insurance fraud may be 

difficult to detect because insurance criminals may not be easily identifiable. Insurance criminals may range from 
organized fraud rings to dishonest individuals. Other types of fraud may include mortgage loan fraud, banking 
fraud, and health care fraud. 

Furthermore, property and casualty insurers typically rely on adjusters and special investigation units 

15 (SIUs) within their companies to investigate potentially fraudulent requests (e.g., insurance claims, bank checks, 
loan applications, and health care billing - i.e., "requests" for financial transactions from customers of a financial 
institution). Insurance companies, banks, and mortgage lenders, however, may have a limited number of adjusters 
and investigators. Therefore, it may not be feasible to manually investigate every request filed for fraudulent 
activity. 

20 Some methods for detecting the potential for fraud have focused on identifying a subset of requests for 

investigation that have a high potential for fraud. Such methods may make use of insurance industry databases that 
have been developed to assist in detecting the potential for fraud. For example, the National Insurance Crime 
Bureau (NICB) of Palos Hills, IL compiles a database of insurance claim data from member property and casualty 
insurance companies that insurance companies can access to determine if one of their current claims is potentially 

25 fraudulent. The NICB database includes suspicious requests that have been submitted to all participating insurance 
companies. In addition, ISO of Jersey City, NJ provides a product, ISO requestSearch™, that includes databases for 
insurance claim data. There is generally incentive to identify only requests with the greatest potential of fraud to 
reduce the "false-positive" rate. Such a system may reduce time spent on human analysis while also reducing the 
costs to the company of fraudulent requests. 

30 

SUMMARY OF THE INVENTION 

In various embodiments, a potential for fraud may be assessed (e.g., in insurance claims, mortgage loans, 
banking transactions, and health care billing) using a computer system to which data is provided. While the 
embodiments described below describe assessing a probability for fraud in insurance claims, it is to be understood 
35 that these embodiments may also be adjusted to detect the potential of fraud in requests in other industries such as, 
but not limited to, banking, mortgage loans, and health care. In some embodiments, the potential for fraud may be 
assessed using multiple fraud potential detection techniques including, but not limited to, identity searches, identity 
validation, model comparisons, and business rule evaluations. 

In some embodiments, a relative probability of potential for fraud in a claim may be determined and a 
40 respective fraud potential indicator assigned, using a fraud potential detection technique. For example, at least one 
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fraud potential indicator may be assessed based on at least one comparison of at least one request data element (e.g., 
a data element in a request to the company) to data in a database or watch list for matches and near matches. In 
some embodiments, at least one first fraud potential indicator may be assessed from at least one comparison of at 
least one request data element to at least one fraud model. In some embodiments, various request data elements may 
5 be verified to confirm the probable existence of the data (e.g., confirming that a person listed on a claim exists and 
actually lives at a listed address). In various embodiments, a fraud model may be created using historical fraud 
patterns in claims that have been proven fraudulent. Other fraud models are also contemplated. In some 
embodiments, at least one fraud potential indicator may be assessed using business rules designed to detect 
potentially fraudulent requests. 

10 In various embodiments, two or more fraud potential detection techniques may be used together (e.g., using 

a combined or averaged score from each technique) to give an indication of the potential for fraud in a request. In 
some embodiments, if the score is greater than a predetermined threshold, action may be taken on the request to 
further investigate the potential for fraud. Some embodiments may include modifying the threshold to obtain a 
desired quantity of request referrals for further review. 

15 In some embodiments, a method of assessing the potential for fraud in a request may include assessing at 

least one first fraud potential indicator for request data from at least one comparison of at least one request data 
element to other data. For example, a database of suspicious names, places, cars, etc. may be maintained and 
compared against data from current requests. In some embodiments, a "watch-list" of data elements to look for may 
also be maintained (e.g., by an adjustor) and compared to current request data. In some embodiments, matches and 

20 near matches may be used to assign a "score" or fraud potential indicator for a request. In some embodiments, types 
of matches, frequency of matches, and frequency of near-matches may indicate a higher or lower potential of fraud. 
In some embodiments, the types and frequency of matches may be weighted to assign a score relative to the 
potential for fraud in the request. 

In various embodiments, the potential for fraud in a request may be assessed using an identity verification 

25 engine to verify the identification of various individuals and businesses involved in the request. For example, the 
insured, the claimant, doctors, lawyers, and/or other individuals may be verified by using sources such as, but not 
limited to, public records and bills (e.g., phone bills) to verify that the information provided for each of these 
individuals and businesses in the request is consistent with an actual individual or business. 

In various embodiments, request data may be compared to models created based on past historical fraud 

30 patterns. In some embodiments, predictive modeling, analytical modeling, and data mining techniques may be used 
to determine potential for fraud in a request based on how closely the request resembles the model. 

In various embodiments, business rules may be used to detect issues related to the potential for fraud in a 
claim such as, but not limited to, injury types, date of loss compared to date of report, policy expiration compared to 
the date of the report, existence of a police report, and the number of vehicles involved. In some embodiments, the 

35 business rules may be modified to accommodate for regional differences and changing trends in fraud. 

In various embodiments, other components may be added. For example, an administrative component may 
be added to allow a user to load information, values, thresholds, and/or other data for using the system. In some 
embodiments, the system may include links to relevant websites (e.g., with investigative tools). In some 
embodiments, references may be included for use by people such as, but not limited to, adjustors and investigators. 



2 



WO 2005/048045 



PCT/US2004/036792 



For example, a link to the state of New York Insurance Manual may be included. Other components are also 
contemplated. 

BRIEF DESCRIPTION OF THE DRAWINGS 

5 A better understanding of the present invention may be obtained when the following detailed description of 

preferred embodiments is considered in conjunction with the following drawings, in which: 

FIG. 1 illustrates a network diagram of a wide area network suitable for implementing various 
embodiments. 

FIG. 2 illustrates a computer system suitable for implementing various embodiments. 
10 FIG. 3 illustrates a flowchart of a method for assessing the potential for fraud in a request, according to an 

embodiment. 

FIG. 4a illustrates a flowchart of a method for detecting a potential for fraud in a request using an identity 
search, according to an embodiment. 

FIG. 4b illustrates a flowchart of a method for detecting a potential for fraud in a request using an identity 
15 verification, according to an embodiment 

FIG. 5 illustrates a flowchart of a method for detecting a potential for fraud in a request using predictive 
modeling, according to an embodiment. 

FIG. 6 illustrates a flowchart of a method for detecting a potential for fraud in a request using business 
rules, according to an embodiment. 
20 FIG. 7 illustrates a system using an identity search engine, a rules engine, and a predictive modeling 

engine, according to an embodiment. 

FIG. 8 illustrates a flowchart for assigning and referring requests, according to an embodiment. 

FIG. 9 illustrates a flowchart of a method for using request data to assess the potential for fraud in a request 
and report the potential, according to an embodiment. 
25 FIG. 10 illustrates a flowchart of a method for loading request data into a database accessible by a fraud 

assessment system, according to an embodiment. 

FIG. 11 illustrates a screenshot of an insurance claim summary, according to an embodiment. 

FIG. 12 illustrates a screenshot of a watch list, according to an embodiment. 

FIG. 13 illustrates a screenshot of a watch list update, according to an embodiment. 
30 FIG. 14 illustrates a screenshot of a manager notebook with the referred tab selected, according to an 

embodiment. 

FIG. 15 illustrates a screenshot of a manager notebook with the assigned tab selected, according to an 
embodiment. 

FIG. 16 illustrates a screenshot of a manager notebook with the rejected tab selected, according to an 
35 embodiment. 

FIG. 17 illustrates a screenshot of an identity search engine summary, according to an embodiment. 
FIG. 18 illustrates a screenshot of identity search engine results, according to an embodiment. 
FIG. 19 illustrates a screenshot of predictive modeling engine summary results, according to an 
embodiment. 

40 FIG. 20 illustrates a screenshot of a business rules summary, according to an embodiment. 
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FIG. 21 illustrates a screenshot of business rules details, according to an embodiment. 

FIG. 22 shows a flowchart of a method for displaying summary information related to the various engines, 
according to an embodiment. 

FIG. 23 illustrates a flowchart of a method for displaying summary information related to involved entities, 
5 according to an embodiment. 

FIG. 24 illustrates a flowchart of a method for configuring administrative information for a fraud potential 
detection system, according to an embodiment. 

FIG. 25 illustrates a flowchart of a method for displaying assessment results, according to an embodiment. 
FIG. 26 illustrates a flowchart of a method for displaying information about requests using tabs, according 
10 to an embodiment. 

While the invention is susceptible to various modifications and alternative forms, specific embodiments 
thereof are shown by way of example in the drawings and will herein be described in detail. It should be 
understood, however, that the drawings and detailed description thereto are not intended to limit the invention to the 
particular form disclosed, but on the contrary, the intention is to cover all modifications, equivalents and alternatives 
15 falling within the spirit and scope of the present invention as defined by the appended requests. 

DETAILED DESCRIPTION OF SEVERAL EMBODIMENTS 

Fig. 1 illustrates an embodiment of a wide area network ("WAN"). WAN 102 may be a network that spans a 
relatively large geographical area. The Internet is an example of WAN 102. WAN 102 typically includes a plurality of 

20 computer systems that may be interconnected through one or more networks. Although one particular configuration is 
shown in Fig. 1, WAN 102 may include a variety of heterogeneous computer systems and networks that may be 
interconnected in a variety of ways and that may run a variety of software applications. 

One or more local area networks ("LANs") 104 may be coupled to WAN 102. LAN 104 may be a network 
that spans a relatively small area. Typically, LAN 104 may be confined to a single building or group of buildings. 

25 Each node (i.e., individual computer system or device) on LAN 104 may have its own CPU with which it may 
execute programs, and each node may also be able to access data and devices anywhere on LAN 104. LAN 104, 
thus, may allow many users to share devices (e.g., printers) and data stored on file servers. LAN 104 may be 
characterized by a variety of types of topology (i.e., the geometric arrangement of devices on the network), of 
protocols (i.e., the rules and encoding specifications for sending data, and whether the network uses a peer-to-peer 

30 or client/server architecture), and of media (e.g., twisted-pair wire, coaxial cables, fiber optic cables, and/or radio 
waves). 

Each LAN 104 may include a plurality of interconnected computer systems and optionally one or more 
other devices such as one or more workstations 110a, one or more personal computers 112a, one or more laptop or 
notebook computer systems 114, one or more server computer systems 116, and one or more network printers 118. 
35 As illustrated in Fig. 1, an example LAN 104 may include one of each computer systems 110a, 112a, 114, and 116, 
and one printer 118. LAN 104 may be coupled to other computer systems and/or other devices and/or other LANs 
104 through WAN 102. 

One or more mainframe computer systems 120 may be coupled to WAN 102. As shown, mainframe 120 
may be coupled to a storage device or file server 124 and mainframe terminals 122a, 122b, and 122c. Mainframe 
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terminals 122a, 122b, and 122c may access data stored in the storage device or file server 124 coupled to or 
included in mainframe computer system 120. 

WAN 102 may also include computer systems connected to WAN 102 individually and not through LAN 
104 for purposes of example, workstation 110b and personal computer 112b. For example, WAN 102 may include 
5 computer systems that may be geographically remote and connected to each other through the Internet. 

Fig. 2 illustrates an embodiment of computer system 250 that may be suitable for implementing various 
embodiments of a system and method for assessing the potential for fraud in requests (e.g., insurance claims, bank 
checks, loan requests, and health care bills). Each computer system 250 typically includes components such as CPU 
252 with an associated memory medium such as floppy disks 260. The memory medium may store program 
10 instructions for computer programs. The program instructions may be executable by CPU 252. Computer system 
250 may further include a display device such as monitor 254, an alphanumeric input device such as keyboard 256, 
and a directional input device such as mouse 258. Computer system 250 may be operable to execute the computer 
programs to implement computer-implemented systems and methods for assessing the potential for fraud in 
insurance claims. 

15 Computer system 250 may include a memory medium on which computer programs according to various 

embodiments may be stored. The term "memory medium" is intended to include an installation medium, e.g., a CD- 
ROM or floppy disks 260, a computer system memory such as DRAM, SRAM, EDO RAM, Rambus RAM, etc., or a 
non-volatile memory such as a magnetic media, e.g., a hard drive or optical storage. The memory medium may also 
include other types of memory or combinations thereof. In addition, the memory medium may be located in a first 

20 computer, which executes the programs or may be located in a second different computer, which connects to the first 
computer over a network. In the latter instance, the second computer may provide the program instructions to the first 
computer for execution. Computer system 250 may take various forms such as a personal computer system, mainframe 
computer system, workstation, network appliance, Internet appliance, personal digital assistant ("PDA"), television 
system or other device. In general, the term "computer system" may refer to any device having a processor that 

25 executes instructions from a memory medium. 

The memory medium may store a software program or programs operable to implement a method for 
assessing the potential for fraud in insurance claims. The software program(s) may be implemented in various ways, 
including, but not limited to, procedure-based techniques, component-based techniques, and/or object-oriented 
techniques, among others. For example, the software programs may be implemented using ActiveX controls, C++ 

30 objects, JavaBeans, Microsoft Foundation Classes ("MFC"), browser-based applications (e.g., Java applets), traditional 
programs, or other technologies or methodologies, as desired. A CPU such as host CPU 252 executing code and data 
from the memory medium may include a means for creating and executing the software program or programs 
according to the embodiments described herein. 

Various embodiments may also include receiving or storing instructions and/or data implemented in 

35 accordance with the foregoing description upon a carrier medium. Suitable carrier media may include storage media 
or memory media such as magnetic or optical media, e.g., disk or CD-ROM, as well as signals such as electrical, 
electromagnetic, or digital signals, may be conveyed via a communication medium such as a network and/or a 
wireless link. 

Various embodiments include assessing the potential for fraud in requests. While various embodiments for 
40 assessing the potential for fraud are discussed below with respect to insurance claims, it is to be understood that 
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these embodiments may also be applied to detecting other kinds of fraud including, but not limited to, check fraud, 
mortgage or other loan application fraud, and health billing fraud. As used herein a "claim" may refer to a demand 
for compensation for a loss, such as, but not limited to, medical treatment due to bodily injury, death of an insured, 
property damage, etc. In addition, the systems and methods disclosed herein may be used to detect the potential for 
5 various kinds of fraud in insurance claims such as, but not limited to, health, property and casualty, and/or life. 

In various embodiments, request data may include information related to any parties related to the request. 
For example, parties related to the request may include, but are not limited to, claimants, witnesses, insureds, 
medical providers, and/or individuals and/or businesses providing repair services. The term "request data" is used 
in the following descriptions to refer to data related to requests (e.g., checks, insurance claims, mortgage or other 

10 loan applications, and health care billing). In some embodiments, request data related to an insurance claim may 
include, but is not limited to, date of the claim and/or date of loss, inception date of a policy, expiration date of a 
policy, addresses of parties related to the claim, and details of the loss or the accident leading to the loss. Details of 
an accident may include, but are not limited to, the type of accident (e.g., a rear-end collision), the number of parties 
involved, type and degree of property damage, type and degree of injuries, trajectory of vehicles in a vehicle 

15 accident, and/or location of the accident. In some embodiments, a characteristic of an accident may also include a 
set of two or more individual characteristics. For example, a set of characteristics may describe a type of accident 
that is commonly staged to perpetrate insurance fraud. 

In some embodiments., request data may include check data. For example, check data may include 
information on a drawer (person who writes the check), a payee (the person to whom the check is payable to), a 

20 date, an account number, a routing number, and information on involved banks including, but not limited to, a 
drawee bank and a depository bank. In some embodiments, request data may include loan application data. For 
example, loan application data may include, but is not limited to, information about the loan applicant, loan 
applicant's credit history, other debts of the loan applicant, income level of the loan applicant, criminal history of 
the loan applicant, social security number, address, other obligations (e.g., child support), information on the item to 

25 be purchased with the loan money (e.g., title search), and information about other parties involved in the loan. In 
some embodiments, request data may include health care billing data (e.g., name of person receiving care, name of 
the doctor, type of treatment, and extent of stay in a hospital). Other types of data may also be analyzed as request 
data. 

In various embodiments, the potential for fraud may be detected using multiple fraud potential detection 
30 techniques including, but not limited to, identity searches, identity verifications, model comparisons, and business 
rule evaluations. In some embodiments, an overall relative level of potential for fraud (i.e., overall fraud potential 
indicator) may be assigned using multiple fraud potential indicators from one or more fraud potential detection 
techniques. For example, in some embodiments, at least one fraud potential indicator may be assessed based on at 
least one comparison of at least one request data element to data in a database or watch list for matches and near 
35 matches. In some embodiments, a fraud potential indicator may be assessed from at least one comparison of at least 
one request data element to at least one fraud model. In some embodiments, a fraud potential indicator may be 
assessed from attempting to verify a request data element. In various embodiments, a fraud potential indicator may 
be assessed by comparing request data elements to a fraud model created using historical fraud patterns in past 
requests proven fraudulent. Other fraud models are also contemplated. In some embodiments, at least one fraud 
40 potential indicator may be assessed using business rules designed to detect the potential for fraud in a request. 
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In various embodiments, two or more fraud potential detection techniques may be used together (e.g., using 
a combined or averaged score from each technique) to give an indication of whether fraud may exist in a request. In 
some embodiments, if the score is greater than a predetermined threshold, action may be taken on the request to 
further investigate the potential of fraud. Some embodiments may include modifying the threshold to obtain a 
5 desired quantity of request referrals for further review. For example, if the threshold is set too low, a large number 
of requests may be referred for review including requests with a low potential for fraud. 

Fig. 3 illustrates a flowchart of an embodiment of a process for assessing the potential for fraud in requests. 
At 301, request data for a request may be provided (e.g., imported from an insurance claims processing system of an 
insurance carrier) to a computer system for assessing the potential for fraud in the request. In some embodiments, 

10 the request data may include first notice of loss (FNOL) data taken at the time of loss from the claimant and other 
policy data, information on a check to be cashed, or information about a requested loan. Other request data is also 
contemplated. Request data may be extensive and may include, but is not limited to, information about an insured, a 
claimant, and other involved parties. Information about other involved parties may include information about 
involved businesses, doctors, and lawyers. Other request data may include the date of the request, the type of loss, 

15 how many people were involved, and information about vehicles or property involved. Other types of request data 
are also contemplated. 

In certain embodiments, request data (e.g., claim data, check data, and loan data) on a processing system 
(e.g., insurance claim processing system, check processing system, and loan processing system) may be updated as 
new information is obtained. In some embodiments, the request data may be transmitted on a periodic basis (e.g., 
20 every 24 hours) to the computer system for assessing fraud potential. In some embodiments, a computer system may 
both collect and process data without having to transmit the data to another computer system. In some 
embodiments, the data may be analyzed in real-time (e.g., as the data is being entered or processed, for example, by 
an adjuster). 

In various embodiments, a relevant profile (e.g., claim data profile, check data profile, and loan data 

25 profile) may be created. For example, a request data profile may be created by extracting information relevant to 
assessing the potential for fraud in a request to form a condensed version of the request data. In some 
embodiments, the request data may not be extracted (i.e., a request data profile may not be created), but, instead, the 
request data may be used as needed by the computer system. 

At 303, a fraud potential detection technique may be used to detect the potential for fraud in a request (e.g., 

30 an insurance claim). For example, search engines, model comparisons, and business rules may be used to detect the 
potential for fraud in a request. In some embodiments, an assessment of fraud potential (i.e., a fraud potential 
indicator) in a request may be represented by a numerical indicator (e.g., a "score"), a ranking (e.g., using letters), or 
a pass/fail indicator. Other assessment representations are also contemplated. The fraud potential indicator may 
indicate a relative potential for fraud. For example, a fraud potential indicator may be on a scale of one to ten with 

35 one indicating a very low potential for fraud and ten indicating a very high potential for fraud. 

In various embodiments, fraud potential detection techniques may include identity searches, identity 
verifications, predictive modeling, and business rules. Other techniques are also contemplated. In some 
embodiments, the identity searches may compare request data to internal and external databases (e.g., an internal 
"watch list" or a National Insurance Crime Bureau (NICB) database) to find matches between the databases and the 

40 request data. In certain embodiments, request data may be verified. In some embodiments, predictive modeling 
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may compare request data to historical fraudulent patterns (e.g., request data from past proven fraudulent requests). 
In some embodiments, the identity searches may compare check data and loan data to internal and external 
databases to find matches that may indicate a potential for fraud. In various embodiments, business rules may be 
used to find issues in the request data that may indicate the potential for fraud. In some embodiments, identity 
5 searches, identity verification, predictive modeling, and business rules may be used to detect an absence of potential 
for fraud (e.g., request data that indicates the request probably is not fraudulent). Various embodiments may include 
one or more of the fraud potential detection techniques to assign one or more fraud potential indicators. In 
embodiments with multiple fraud potential indicators, the fraud potential indicators may be combined (e.g., by 
adding and/or weighting) to provide a single fraud potential indicator for a request. In some embodiments, the fraud 

10 potential indicators may be used separately. 

At 305, a request's fraud potential indicators may be analyzed. In some embodiments, the fraud potential 
indicators may be manually analyzed (e.g., by an adjuster) to determine if further investigation is needed. In some 
embodiments, the fraud potential indicators may be compared to a threshold. In various embodiments, if there are 
multiple fraud potential indicators for a request, the fraud potential indicators may be combined and the combined 

15 fraud potential indicator may be compared to a threshold to determine if further action is needed. In some 
embodiments, multiple requests may be ranked in order, according to their fraud potential indicators (e.g., highest 
probable fraudulent request may be listed first). In certain embodiments, only requests with fraud potential 
indicators above a threshold may be ranked. 

At 307, a determination may be made whether to take additional investigative action on a request. At 309, 

20 if a determination is made to take further investigative action on the request, the request may be further investigated. 
In some embodiments, the requests may be assigned to an adjuster, investigator, and/or Special Investigative Unit 
(SIU) based on the level of potential for fraud in the request (e.g., based on the request's fraud potential indicators). 
For example, a. request with relatively low fraud potential indicators may be assigned to an adjuster, while a request 
with fraud potential indicators above a certain threshold may be assigned to investigators. In some embodiments, if 

25 the fraud potential indicators are above a certain threshold, the request may be referred to an SIU. 

At 311, if a determination is made not to take further investigative action on the request, the request may be 
processed normally. In some embodiments, if fraud potential indicators are low enough (e.g., negative), payment of 
the request may be expedited. In some embodiments, as additional request data becomes available, the request may 
be reassessed. In addition, requests may be reassessed for other reasons (e.g., if new predictive models are 

30 developed). 

FIG. 4a illustrates a flowchart of an embodiment of a method for assessing potential for fraud in a request 
using an identity engine. At 401, the request data may be compared to various databases. In various embodiments, 
request data may be searched for people, addresses, vehicles, businesses, and other data elements that may indicate a 
potential for fraud in the request. In some embodiments, people, vehicles, and businesses involved in the request 

35 may be compared to people, vehicles, and businesses listed in databases, such as, but not limited to, the National 
Insurance Crime Bureau (NICB) database, an insurance companies historical claims database, a commercial 
mailbox database, a "watch list" database, and an SIU database for a match. For example, people involved in the 
request (e.g., claimant, insured, drawer, payee, and loan applicant) may be searched by their first name, last name, 
social security number, address, city, home phone, and work phone. In some embodiments, vehicles may be 

40 searched by vehicle type, VIN number, and license tag number. For example, if a vehicle involved in the current 
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request was also involved in a past claim that was proven fraudulent and therefore the vehicle was listed in the NICB 
database, the current request may be assigned a high fraud potential indicator. Other external databases may also be 
searched. In some embodiments, a high frequency of previous requests (e.g., insurance claims), involving the same 
person or vehicle may indicate a higher potential for fraud. In some embodiments, businesses that may not be 
5 suspicious even though they appear in multiple claims (e.g., a rental car company) may not be searched. A 
commercial mailbox database may have addresses that belong to commercial mail receiving agencies (CMRAs) 
(organizations that rent out commercial mailboxes). The use of a commercial mailbox may be indicate that a person 
is trying to disguise themselves for fraud purposes. Various levels of fraud potential indicators may be assigned 
depending on whether the commercial mailbox is used by a person or a business involved in the request. 

10 In some embodiments, a "watch list" database (i.e., a custom database) may be established to find requests 

with certain people, vehicles, businesses, and other data elements that indicate the possibility of fraud. In some 
embodiments, an organization may be added to the watch list. Information about the organization on the watch list 
may include, but is not limited to, the business name, the DBA name, the address, the phone numbers, the role of the 
organization respective to the claim, and the tax identification number of the organization. Other information that 

15 may be included on the watch list may include the source of the information for an entry on the watch list, the author 
of the entry on the watch list, the author's region, and other comments. 

In various embodiments, the watch list may be set up by an adjustor or SIU. Other entities may also create 
a watch list. If a match is detected, the author of the particular watch list involved may be notified and a 
corresponding fraud potential indicator may be assigned. 

20 In various embodiments, other types of databases may also be searched. For example, a sanctioned 

medical providers database may be searched for businesses that have been disciplined for questionable business 
practices. Other databases maintained by industry groups and commercial entities may also be searched. In some 
embodiments, industry databases may be searched. For example, an "industry database" may refer to a centralized 
database that includes request data contributed by more than one insurance company to assist other insurance 

25 companies in detecting fraud. 

In some embodiments, databases may be searched that do not indicate a possibility of fraud but instead are 
searched for other reasons such as, but not limited to, compliance with state and federal laws. For example, the 
Office of Foreign Assets Control (OFAC) database may be searched for request data elements to indicate the 
involvement of possible terrorists (in compliance with the requirements set forth in the Patriot Act), 

30 At 403, a fraud potential indicator may be assigned to the request based on matches between the request 

data and entries in at least one of the databases. In some embodiments, the identity fraud potential indicator may be 
weighted based on the frequency of matches, frequency of near matches, type of match (e.g., type of database 
matched), number of databases matched, and other factors. For example, a higher fraud potential indicator may be 
assigned to a request in which the name of the claimant matches a listed name in the NICB's database and the 

35 insurance company's internal database than if a claimant had only matched an entry on the insurance company's 
internal database. In some embodiments, the request may be given a higher fraud potential indicator if multiple 
request data elements match entries in one or more searched databases. For example, a request may be given a 
higher fraud potential indicator if the name of the claimant and the claimant's listed physician match names on the 
NICB's database than if only the claimant's name was found in the NICB's database. In some embodiments, a 

40 request may receive a higher fraud potential indicator if a request element matches a data element in a database than 
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if the request element was a near-match to a data element in the database. In addition, near matches may be 
weighted differently depending on the degree of match (e.g., the number of letters that match compared to the 
number of letters that do not match). In some embodiments, the fraud potential indicator may be based on other 
expert knowledge of insurance claims and/or fraud assessment. In some embodiments, a fraud potential indicator 
5 may be assigned to each request data element that matches and a total identity fraud potential indicator may be 
assigned based on the fraud potential indicators for the various request data elements (e.g., by adding or averaging 
the fraud potential indicators for multiple request data elements). 

In various embodiments, if a person appears in another claim in the insurance company's historical claims 
database, multiple elements of the claims may logically match and therefore be weighted as only one match for 
10 assigning an identity fraud potential indicator. For example., if the same person appears in two claims, the person's 
name, address, and phone number may all match, however, it may be misleading to indicate multiple matches with 
the searched database. Therefore, logical matches may be accounted for and the identity fraud potential indicator 
may be appropriately adjusted. 

15 Table 1 Search rules for Identity Searching. 



Search Rule Identifier 


Matching Item in Request Data 


Database 


S-l 


Involved person 


Company historical requests 


S-2 


Involved person 


Industry database 


S-3 


Involved person 


SIU 


S-4 


Involved vehicle(s) 


SIU 


S-5 


Involved vehicle(s) 


Industry database < 


S-6 


Address of involved business 


Commercial mailbox 


S-7 


Involved business 


Industry database 


S-8 


Address of involved person 


Commercial mailbox 


S-9 


Address of involved business 


Watch List 


S-10 


Vehicle , 


Company historical requests 


S-ll 


Involved business 


Sanctioned medical providers 


S-12 


Address of involved person 


Watch List 



In various embodiments, search rules may be created and used with requests when performing searches. 
For example, Table 1 provides a summary of an embodiment of search rules that may be used to search request data 
elements. Different search rules may also be used. The "Matching Item in Request Data" refers to a request data 

20 element that may match or approximately match a database of insurance data. An "Involved Person" is a particular 
person related to the request, for example, a claimant. A "Vehicle" refers to a particular vehicle related to a request, 
for example, a vehicle involved in an accident. An "Involved Business" refers to a particular business related to a 
request, for example, a medical provider or vehicle repair shop. An involved vehicle or business may also be 
referred to as an "involved object." In some embodiments, the fraud potential indicator assessed for a match of a 

25 request data element to a database may be different for an involved party, an involved business, or an involved 
object. 



10 



WO 2005/048045 



PCT/US2004/036792 



In some embodiments, search rules may be provided to search data from a check. For example, the drawer 
may be compared to people listed in a hot check database. Other check data may also be searched for suspicious 
circumstances. In some embodiments, data related to a loan may be searched. For example, the loan applicant's 
name may be searched for in established databases of past fraudulent loan applications. Other data related to a loan 
5 may also be searched for indications of the possibility of fraud. 

In some embodiments, for a given search rule a formula may be used to determine the fraud potential 
indicator for a request. A formula may be based on several factors, such as, but not limited to, the number of 
matches of request data to a database. Additional factors may include a loss type, ranking, point weight, and/or 
adjustment numbers. A loss type may take into account the fact that certain types of requests tend to be associated 
10 with a higher rate of fraud. Request types that are unusual or are difficult to verify are examples of such requests. 
For example, stolen vehicle requests may tend to have a higher incidence of fraud than certain types of collisions. In 
some embodiments, the fraud potential indicator for a rule may be calculated by multiplying the number of matches 
by a ranking, point weight, an adjustment number and/or a numerical value associated with a loss type. For 
example, a fraud potential indicator may be assigned based on a formula such as, but not limited to: 
15 Fraud potential indicator = Ranking * Point Weight * Loss Type Value * number of 

matches found in the database * adjustment number 
Other formulas may also be used. In some embodiments, fraud potential indicators may be scored differently 
depending on whether the person, vehicle, or business matched a database. In various embodiments, the following 
corresponding formulas may be used. Other formulas are also contemplated. 

20 



Table 2 Search Rule Corresponding Formulas. 



Search Rule Identifier 


Formula 


S-l 


4 * 2.5 * loss type value * No. of matches in database * .15 


S-2 


5 * 13.5 * loss type value * No. of matches in NICB * .15 


S-3 


5 * 11.5 * loss type value * No. of matches in SIU * .15 


S-4 


5 * 12.5 * loss type value * No. of matches in SIU * .15 


S-5 


5 * 13,5 * loss type value * No. of matches in NICB * .15 


S-6 


4 * 14 * loss type value * No. of matches in database * .15 


S-7 


4 * 13.5 * loss type value * No. of matches in NICB * .15 


S-8 


5 * 13.5 * loss type value * No. of matches in database * .15 


S-9 


5 * 13.5 * loss type value * No. of matches in Watch List * .15 


S-10 


2*3* loss type value * No. of matches in database * .15 


S-ll 


5 * 13.5 * loss type value * No. of matches in database * .15 


S-12 


5 * 13.5 * loss type value * No. of matches in Watch List * .15 



In some embodiments, a search for an involved party in a database may involve a search for the involved 
parties' names, addresses, home phone numbers, work phone numbers, etc. In some embodiments, a search for an 
25 involved vehicle may include search for a Vehicle Identification Number (VIN#) and/or a license tag number. In 
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other embodiments, a search for an involved business may include a search for a business name, a "doing business 
as" name, an address, business phone number, etc. 

Search rules S-l and S-10 (from Table 1) both involve comparisons of request data to a company historical 
requests database. In some embodiments, the frequency of previous requests by an involved person or a particular 
5 vehicle may be indicative of fraud, even if the prior requests were not suspicious. 

Search rules S-2, S-5, and S-7 (from Table 1) involve comparisons of request data to an industry database 
such as the NICB database. A new request may be suspicious if it involves an individual or business that has been 
investigated previously by an industry organization such as the NICB. Similarly, a request may be suspicious if it 
involves a vehicle involved in a prior suspicious request. In these cases, the potential for fraud increases if such 

10 matches exist. Additionally, there may be a connection between the owner or prior owner of the vehicle involved in 
an accident and a new claim. 

Search rules S-3 and S-4 both involve comparisons of request data to an SIU database. A new request may 
be suspicious if it involves an individual or vehicle that has been investigated previously by an SIU. The potential 
for fraud in a new request may be increased in these cases. 

15 Search rules S-6 and S-8 both involve matches of request data to a commercial mailbox database. There 

may be legitimate reasons for people to use commercial mail receiving agencies (CMRA) as their private mailbox. 
However, it is not uncommon for people or businesses to use CMRAs to disguise themselves for various reasons. 
CMRAs offer some degree of anonymity and distance from their true place of residence. CMRAs are also used to 
prevent insurance companies from attributing previous accident history to their real address in order to lower 

20 insurance premiums. If a person uses a CMRA address with respect to an insurance claim, especially if the address 
is written as if it is a suite or apartment, it may be important to ascertain the true address of the person. 

Search rules S-9 and S-12 both involve comparisons of request data to a watch list database. SIU 
investigators and/or insurance company management may gather intelligence data from law enforcement, other 
carriers, and/or from personal experience concerning individuals or business that may be involved in fraud. Search 

25 rules S-9 and S-12 allow suspicious entities to be entered directly into a watch list database for comparison to new 
requests data. In some embodiments, the author of an item on the watch list may be notified of any matches. 

Search rule S-ll involves comparisons of request data to a sanctioned medical provider database. Medical 
providers or medical businesses that have been disciplined for questionable business practices may be entered in this 
database. Matches from a new request to a medical provider in a sanctioned medical providers database may 

30 indicate a potential for fraud in the new request. 

In various embodiments, the potential for fraud in a request may be assessed using an identity verification 
technique, as seen in FIG. 4b, to verify the identification of various individuals and businesses involved in the 
request. At 405, a request data element may be verified against various databases. For example, the insured, 
claimant, doctors, lawyers, and other individuals may be verified by searching public records and bills (e.g., phone 

35 bills) to verify that the information provided for each of these individuals and businesses in the request corresponds 
to an actual individual or business's name. At 407, a fraud potential indicator may be assigned based on whether the 
verification was successful. In some embodiments, the level of the fraud potential indicator assigned may depend on 
the number of request data elements that could be verified. In some embodiments, identity verification may also be 
used to meet compliance requirements in various state and federal laws. 
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FIG. "5 illustrates a flowchart of an embodiment of a method for assessing a fraud potential indicator for a 
request by predictive modeling. At 501, request data may be compared to at least one fraud pattern (also called a 
fraud model) to search for similarities between the request data and fraud patterns. At 503, a fraud potential 
indicator may be assigned to a request based on similarities between request data and a fraud model. In some 
5 embodiments, the fraud potential indicator may be a numerical value associated with a type of fraud pattern. The 
fraud potential indicator may be based on expert knowledge of insurance claims and/or fraud assessment. At least 
one fraud pattern may be associated with an indication of fraud. In certain embodiments, a fraud potential indicator 
may be assigned based on a match between the request data and at least one characteristic of a fraud pattern. In 
some embodiments, a fraud potential indicator may be weighted according to the nearness of a match or 
10 approximate match. In some embodiments, an exact match may indicate a higher potential for fraud than an 
approximate match. 

In some embodiments, a fraud pattern used in predictive modeling may be established using historical data 
obtained from requests in which fraud was previously identified. In some embodiments, a fraud model may include 
relationships between parties relating to the request and/or request data. For example, a fraud model may include 
15 the characteristics of a suspicious accident such as a staged rear-end collision. 

As another example, if a worker's compensation claim is filed for an accident that took place at work on a 
Monday morning without any witnesses, the claim may be assigned a relative fraud potential indicator. In this 
example, a request may be compared to a predictive model using these request elements: 

a) Accident occurred in the morning; and 
20 b) No witness present. 

As another example, circumstances may indicate a "swoop and stop" type fraud. In this case, a request for 
a rear end collision with a match for a sanctioned doctor for the claimant may be assigned a relative fraud potential 
indicator. Other circumstances may also be detected. 

At 505, one or more predictive modeling fraud potential indicators may be combined and/or weighted if 
25 appropriate to obtain a total predictive modeling fraud potential indicator for the request. In some embodiments, 
one or more predictive modeling fraud potential indicators may be assigned a weighting. In such an embodiment, 
the weighted fraud potential indicators may be combined to obtain a total predictive modeling fraud potential 
indicator for the request. 

FIG. 6 shows a flowchart of an embodiment of a method of assessing a fraud potential indicator for request 
30 data using business rules. 

At 601, a business rule may be used to detect suspicious conditions in a request. For example, in various 
embodiments, business rules may be used to analyze the injury type, the loss type, the existence of a police report, 
who reported the request, and the number of vehicles involved. In some embodiments, business rules may be used 
to compare the date of loss to the date of the report of the request, the policy inception date to the date of loss, and 
35 the policy expiration date to the date of the report. Business rules may also be used to search for other conditions in 
a request that may indicate fraud. 

For example, the type of injury involved and the number of injuries may indicate whether the request is 
likely to be fraudulent. In some embodiments, serious or visible signs of injury in the request may be contra- 
indicative of fraud, but soft-tissue or other non-visible complaints of injuries (especially by numerous passengers) 
40 may be indicative of possible fraud. In various embodiments, a business rule may apply a multiplier to a fraud 
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potential indicator based on the injury type. In an embodiment, the injury type multipliers may be applied for the 
corresponding injury types (multiple injury types may be added together). For example: 

Minor Injury (superficial/abrasion/contusion) = 1.8 

Fractures/Dislocations = 0 

Puncture Wounds/laceration = 0 

Fatality = -15 

Neck and/or back soft tissue injury = 2.2 
Neck Only Sprain/Strain = 2.2 
Permanent Brain Damage = -10 
Loss of Body Part = -10 
Paralysis/Paresis = -15 
Loss of Sense = 3 
Dental = 1,6 

Psychological Condition = 3 
No Visible Injury = 1.8 
Burns = 0 

In some embodiments, a formula such as, but not limited to, fraud potential indicator = (multiplier) * (cumulative 
injury type multipliers) may be used to assign the fraud potential indicator. In some embodiments, multiplier may 
be a user supplied number based on different aspects of the request. In some embodiments, negative injury type 
multipliers may be assigned to injury types (e.g., fatality) that are contra-indicative of fraud. In some embodiments, 
higher values may be assigned to injury types more indicative of fraud (e.g., soft tissue injuries). 

In some embodiments, the loss type may indicate fraud. For example, request types that are unusual or 
difficult to verify may indicate more potential for fraud. In various embodiments, a loss type multiplier may be 
applied (multiple loss types may be added). For example: 

Failure to Yield = 7 

Hit and Run = 12 

Over Center/Head on/Side Swipe = 5 

Single Vehicle Collision = 7 

Insured Failed to Obey Rules and Regulations = 5 

claimant's Unattended Vehicle Rolled Causing Collision = 5 

Other multipliers may also be used. 

In some embodiments, the date of loss (e.g., accident) versus the date of the report of a claim may be used 
to detect potential for fraud. Claims tend to be reported by parties involved in an accident shortly after the date of 
loss. A delay in reporting may be an indication that facts relating to an accident may be fabricated. In some 
embodiments, the longer the delay between date of loss (DOL) and the date of report (DOR) to a requests 
organization, the greater the potential for fraud in a request. In some embodiments, the fraud potential indicator of 
the DOL vs. DOR business rule may be combined with a loss type value. For example, DOL vs. DOR fraud 
potential indicator may be multiplied by a loss type value. The fraud potential indicator may also be weighted by a 
ranking factor. 

14 



WO 2005/048045 



PCT/US2004/036792 



In some embodiments, the policy effective date versus the date of loss may indicate fraud. There may be a 
significant correlation between the likelihood of fraud and a short time frame between the policy inception date and 
the DOL. Fictitious circumstances tend to accompany such requests since the true date of loss may be just prior to a 
decision to purchase insurance. In some embodiments, as the number of days increases between policy inception 
5 date and DOL the chance of the request being false decreases. The trend may be reflected in a fraud potential 
indicator. 

In some embodiments, the fraud potential indicator associated with policy effective date vs. DOR fraud 
potential indicator may be combined with a fraud potential indicator of the loss type value. For example, the fraud 
potential indicators may be multiplied together. In certain embodiments, the fraud potential indicator may be 

10 combined with a ranking factor. In some embodiments, the time period between policy inception date and DOL 
may be divided into a set of ranges. In some embodiments, a fraud potential indicator may be associated with one or 
more of such ranges. In some embodiments, the fraud potential indicator for the policy inception date vs. DOL 
fraud potential indicator may be set to approximately zero if there was policy renewal. 

In some embodiments, the policy expiration date versus the date of report of loss may be a fraud potential 

15 indicator. There tends to be a significant correlation between the likelihood of fraud and a report of a request 
occurring after the policy expiration date. Typically, requests tend to be reported within the policy period and as 
close to the DOL as possible. In some embodiments, requests reported on or near the policy expiration date or 
within weeks afterward are suspicious and may have an increased potential for fraud. 

In some embodiments, the absence of a police report may be an indication of fraud. Police reports often 

20 accompany insurance claims, except for very minor issues. When an accident or theft occurs and the police are not 
called, there may be an increased potential for fraud. In some embodiments, a fraud potential indicator from a no 
police report business rule may be combined with (e.g., multiplied by) a ranking factor if other indications of fraud 
are present. In some embodiments, a fraud potential indicator may be multiplied by 0 if a police report was filed and 
2 if the police report was not filed. Other multipliers may also be used. 

25 In some embodiments, the identity of the person who made the request may be an indication of fraud. In 

some embodiments, a fraud potential indicator may be assigned based on who and how the request was initially 
made. For example, if an attorney or public adjustor reports a property damage only claim, there may be an 
increased potential for fraud. In some embodiments, it may be less suspicious when an insured person reports the 
request. 

30 In some embodiments, the number of vehicles involved in an accident may be an indication of fraud for an 

insurance claim. In some embodiments, the number of vehicles involved in an accident may be both an indication of 
fraud and a counter-indicator of fraud depending on the circumstances. For example, accidents involving more than 
two vehicles tend to be more difficult to stage, and therefore, may be less likely to be fraudulent. In some 
embodiments, a multi-vehicle accident may have a negative contribution to the fraud potential indicator for a 

35 request. However, single vehicle accidents may have a greater potential of being fraudulent. In some embodiments, 
the fraud potential indicator associated with the number of vehicles involved may be combined with (e.g., multiplied 
by) a ranking factor if other indications of fraud are present. In some embodiments, if using formulas, multiple 
vehicle accidents may be assigned negative multipliers. 

In some embodiments, the length of time between the date a check was written and the date that the check 

40 is cashed may be an indication of fraud. In some embodiments, inconsistent loan data may be an indication of fraud. 
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For example, an application that indicates a person has a low salary, but very high liquid assets value may have a 
higher potential for fraud. In addition, other circumstances about a request may be analyzed using business rules. 
For example, loan data may be used to determine the amount of money an applicant may be loaned under the 
"28/36" rule for mortgages. In some embodiments, a loan applicant's income may be compared to his assets. Other 
circumstances may also be investigated. 

In various embodiments, a user may be allowed to create one or more user-defined (i.e., custom) business 
rules. A custom business rule may include information from the user for assessing a fraud potential indicator for a 
request. 

At 603, a business rule may be used to assign a fraud potential indicator to at least one request. In some 
embodiments, a business rule may be designed to detect suspicious circumstances reported in a request and used to 
assign an appropriate fraud potential indicator to the request. 

In various embodiments, business rule fraud potential indicators may be combined to obtain a total business 
rule fraud potential indicator for the request. For example, if circumstances match two different business rules, a 
higher fraud potential indicator may be assigned. In some embodiments, at least one business rule fraud potential 
indicator may be weighted. In various embodiments, weighted business rule fraud potential indicators may be 
combined to obtain a total business rule fraud potential indicator for the request. 

FIG. 7 illustrates an embodiment of software components for perforrning fraud analysis. An embodiment 
of a system for assessing the potential for fraud in an insurance claim may include a plurality of software 
components. A software component may perform at least a portion of a method for assessing the potential for fraud 
in an insurance claim. Request data 701 may be stored in at least one database. The request data 701 may be 
obtained from a variety of sources. The sources may include, but are not limited to, an insurance policy, accident 
reports, parties related to the request, insurance adjusters, insurance fraud investigators, etc. In some embodiments, 
request data 701 may be processed for assessment of the potential for fraud by at least one software component. 
Data transformer component 703 may extract information from the request data 701 that may be relevant to 
assessing the potential for fraud in an insurance claim. Data transformer component 703 may then create a request 
data file in a desired format using the extracted data. 

In some embodiments, identity engine component 705 may be used to assign at least one fraud potential 
indicator 717 for request data 701. Identity engine component 705 may compare at least one request data element to 
various databases. In some embodiments, various databases may include, but are not limited to, insurance industry 
data 725, commercial mailbox data 727, SIU data 729, sanctioned medical providers data 731, company requests 
data 733 and/or custom watch list data 735. Identity engine component 705 may assess similarities between (e.g., 
matches or approximate matches of characteristics) request data 701 and the various databases. A fraud potential 
indicator 717 for the request data 701 may be evaluated from the similarities by evaluation component 711. In some 
embodiments, identity engine component 705 may evaluate a fraud potential indicator 717 directly. 

In some embodiments, Identity Systems (IDS) from Search Software America (SSA) of Old Greenwich, CT 
may be used with the identity engine component 705. SSA IDS performs searching, matching, and duplicate 
discovery for many forms of identification data. SSA IDS transparently maintains its own high performance "fuzzy" 
indexes, and de-normalized tables. SSA IDS also compensates for variation, spelling, keying, and word sequence 
errors in names, addresses and identity data regardless of country, language or character set. SSA IDS also supports 
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searches of aliases, former names, compound names, prior addresses, multiple dates of birth, identity, phone 
numbers, etc. 

In some embodiments, rules engine component 707 may assess at least one fraud potential indicator 719 for 
request data 701. Rules engine component 707 may compare at least one request data element to at least one 
5 business rule 737. As used herein, a "rules engine" may include an expert system, which is operable to produce an 
output as a function of a plurality of rules. A rules engine component 707, in some embodiments, may include an 
expert computer system that utilizes and/or builds a knowledge base in the form of business rules and/or formulas 
737 to assist the user in decision-making. In some embodiments, rules engine component 737 may include rules 
based on expert knowledge for assessing the potential for fraud in an insurance claim. In some embodiments, the 

10 Visual Product Modeling System (VP/MS) from Computer Sciences Corporation in El Segundo, CA may be used in 
rules engine component 707. In some embodiments, the fraud potential indicator 717 for a request may be assessed 
by rules engine component 707 or evaluation component 713. 

In some embodiments, predictive modeling engine component 709 may assess a fraud potential indicator 
721 for request data 701. In some embodiments, predictive modeling component 709 may develop fraud patterns 

15 (or "fraud models 723") from historical request data associated with fraudulent requests. In some embodiments, 
predictive modeling component 709 may compare at least one request data element to at least one fraud model 723. 
In some embodiments, predictive modeling engine component 709 may assess similarities (e.g., matches or 
approximate matches) of at least one request data 701 to at least one fraud model 723. In certain embodiments, a 
fraud potential indicator 721 for the request may be evaluated by evaluation component 715 based on identified 

20 similarities. In an alternative embodiment, predictive modeling engine component 709 may evaluate a fraud 
potential indicator 721 directly. 

As used herein, a predictive modeling engine component 709 may be operable to search for patterns in a 
group of historical data as a means of assessing future behavior. A predictive modeling engine 709 may discover 
previously unknown relationships among data. In some embodiments, predictive modeling component 709 may be 

25 used to detect suspicious relationships or fraud patterns among claimants, witnesses, medical providers, attorneys, 
repair facilities, etc. In some embodiments, predictive modeling engine component 709 may create and store a list 
of such fraud patterns 723 evaluated from past fraudulent request data. In some embodiments, Predictive Targeting 
System from Magnify of Chicago, IL may be used in predictive modeling engine component 709. 

In various embodiments, other components may be used. For example, an administrative component may 

30 be added to allow a user to load information, values, thresholds, and other data for using the system. In some 
embodiments, the system may include links to relevant tools (e.g., websites with investigative tools). In some 
embodiments, links to information relevant to a user's usage of the system or workload may also be included. In 
some embodiments, references may be included for use by people such as, but not limited to, adjustors and 
investigators. In some embodiments, links to references may be included on a menu bar. For example, a link to the 

35 state of New York Insurance Manual may be included for access by an investigator who is investigating a claim in 
New York. As another example, a company's standard operating procedures could be linked. Other components 
are also contemplated. 

FIG. 8. shows an embodiment of software components for assigning requests (e.g., claims) to investigators. 
While FIGs 8-21 show embodiments in which the request is an insurance claim, FIGs 8-21 may also be applied to 
40 other requests (e.g., checks and loans). In various embodiments, rules 803 may be used to analyze fraud potential 
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indicators (717, 719, 721) assigned to a claim. In some embodiments, the fraud potential indicators may also be 
combined (e.g., by adding) and/or weighted according to rules 803. In some embodiments, rules 803 may be used 
by an assignment and referral component 801 to assign a claim to an SIU 805. For example, rules may analyze 
whether one or more fraud potential indicators (or the combined and/or weighted fraud potential indicator) are 
5 above a certain threshold to assign the claim to the SIU. In some embodiments, the rules 803 may be used to assign 
a claim to an investigator (e.g., if the fraud potential indicator(s) indicate a smaller likelihood of the claim being 
fraudulent than claims to be assigned to the SIU). In some embodiments, the claim may be assigned to an adjuster 
809 for review. In various embodiments, if the fraud potential indicator(s) are not above a certain threshold (or are 
below a defined threshold), the claim may be assigned to routine claim handling. In some embodiments, if the fraud 

10 potential indicator(s) are low enough (e.g. negative) the claim may be paid 813 without further handling. In some 
embodiments, when a claim is referred for review, as in actions 805, 807, and 809, assignment and referral 
component 801 may notify at least one claims adjustor or an SIU investigator by e-mail of the status of the claim. In 
some embodiments, a user that has defined a custom profile relevant to a claim may be notified by e-mail. 

In some embodiments, relative rankings for claims (also called a "status" of the claims) may be assigned 

15 based on a fraud potential indicator for the claim obtained from one or more of the fraud potential detection 
techniques. The status of a claim may be associated with a range of fraud potential indicators. For example, at least 
two ranges of fraud potential indicators may be defined. The ranges may provide a method of ranking claims in 
terms of relative fraud potential indicators. In certain embodiments, at least one of the ranges may be associated 
with an action regarding a claim. For example, a claims organization may consider a claim with a fraud potential 

20 indicator below a certain value to have a low probability of being fraudulent. Therefore, the claims organization 
may associate the range below a certain value with automatic or express payment of the claim. In a similar manner, 
a claim with a fraud potential indicator in a certain range may be associated with routine claim handling. A claims 
adjuster may be notified of the increased fraud potential indicator for a claim with a fraud potential indicator above 
a certain threshold. A claim with a fraud potential indicator greater than a threshold value (referred to herein as a 

25 minimum referral threshold) may be automatically referred for an investigation with a high level of scrutiny such as 
that performed by a special investigative unit (SIU) of a claims organization. 

Some embodiments of a method for assessing the potential for fraud for claim data may include modifying 
at least one threshold value to obtain a selected volume of claims to investigate. For example, a minimum referral 
threshold may be modified or tuned to obtain a selected volume of referrals for further review. 

30 In various embodiments, the claims may be ranked in order of likelihood of being fraudulent. An 

investigator may then investigate the claims in order with the most likely fraudulent claim first. 

In certain embodiments, a system for assessing the potential for fraud in insurance claim data may allow 
adjusters and investigators to track and review referrals from any computer with Internet or company Intranet 
access. An adjuster or investigator may be allowed to display a summary list of all claims referred to that individual. 

35 The list of claims may be arranged in order of highest fraud potential indicator first. In other embodiments, the list 
may be sorted other ways, such as by referred date, by insured, by claim number, etc. In some embodiments, users 
of a system may also display claims that meet certain selected criteria. For example, the selected criteria may 
include, but are not limited to, a range of dates, a range of fraud potential indicators, claims referred to other 
investigators, or open claims. 
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In some embodiments, a system may allow a specific claim in a summary list to be reviewed in more detail 
by selecting the claim. A more detailed description of a selected claim may be displayed, including information 
regarding parties involved. In some embodiments, information that triggered the referral may be "flagged" with an 
icon. The icon may be selected to display a detailed description of reasons the information triggered the referral. In 
5 some embodiments, an investigator may pursue the claim further through standard investigation procedures of a 
claims organization. 

In some embodiments, when claim data for a claim is updated the fraud potential indicator for the claim 
may be assessed again. If a new fraud potential indicator is higher than the previous fraud potential indicator, the 
claim may be reactivated (if inactive) and an investigator may be notified. 

10 FIG. 9 illustrates an embodiment of system 900 for assessing the potential for fraud in insurance claims. 

Claim data 901 may be imported or loaded 903 from an insurance company's claim data database to customer 
database 905. In various embodiments, the claim data may be imported in batches (e.g., claim data may be analyzed 
each night). In some embodiments, claim data may be imported in real-time. For example, as a claim is being 
made, the data may be analyzed and a potential for fraud may be assessed and communicated to the person taking 

15 the claim in real-time. In some embodiments, claim data 901 on customer database 905 may be accessed by a 
computer system that includes fraud assessment 907 software components. Results of fraud assessment 907 may be 
loaded onto reporting database 909. In some embodiments, report 913 of the fraud assessment results may be 
created 911. 

FIG. 10 illustrates an embodiment of system 1000 for loading claim data from an insurance company 

20 database to a customer database. In some embodiments, system 1000 may receive periodic updates (e.g., nightly) of 
claim data from an insurance company's claim data database. Original claim data extract files 1003 may be loaded 
into FTP directory 1001 of system 1000 from an insurance company's claim data database. File receiver 1005 may 
monitor FTP directory 1001 for new extract files 1007, In some embodiments, file receiver 1005 may transfer new 
extract files 1007 to staging directory 1009 to minimize disk usage on the FTP server. In some embodiments, 

25 database loader 1011 may load copies of new extract files 1007 to customer database 1013. In certain 
embodiments, data transformer 1015 may translate claim data into a format suitable for fraud potential assessment. 

In various embodiments, information about requests may be displayed in a browser format. In some 
embodiments, a user may login to a system to access information about a request. FIG. 11 illustrates an embodiment 
of a screen shot of claim summary window 1101 that displays claim information. Claim summary window 1101 

30 may display information regarding involved vehicles 1103 and 1107, involved parties 1105 and 1109, and related 
parties 1111. Other information that may be displayed includes, but is not limited to, claim number, claim status, 
claim office, loss date, loss report date, type of report filed, who reported the claim, the claim type, an accident 
description, a location description, a policy number, a policy state, an inception date, number of renewals on the 
policy, effective date of the policy, and/or an expiration date of the policy. In some embodiments, a prior screen 

35 button 1113 may be provided to allow a user to navigate quickly between claim summaries. 

FIG. 12 illustrates an embodiment of a screen shot of watch list display window 1201 that displays data 
from a watch list database. Watch list display window 1201 may include header row 1205 that describes various 
types of data relating to watch list entries in rows 1203. The types of data relating to watch list entries may include, 
but are not limited to author 1211 of the watch list item, DBA name 1213, business name 1215, and identity 

40 information 1217. In some embodiments, a user may select "Add" push button 1207 to add a new entry to the watch 
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list display. In another embodiment, a user may select "Update" push button 1209 to update an existing entry. In 
some embodiments, the watch list screen may include tabs (not shown). For example, a tab may be presented for an 
individual and a tab may be presented for an organization. In some embodiments, selecting a tab may present 
information about respective individuals or organizations. 
5 FIG. 13 illustrates an embodiment of a screen shot of watch list add/update window 1301. Watch list 

add/update window 1301 may display text boxes 1315 for adding or updating entries in a watch list database. A 
user may enter business information 1311, personal information 1309, and/or other information 1307 in watch list 
add/update window 1301. A user may select "Submit" push button 1303 to save the information entered. 
Alternatively, a user may select "Cancel" push button 1305 to disregard changes in information entered. 
10 In some embodiments, a method may display at least two fraud potential indicators in a graphical user 

interface. 

FIG. 14 illustrates an embodiment of a screen shot of manager notebook window 1401 for displaying fraud 
assessment results. In some embodiments, manager notebook window 1401 may include referred tab 1407, assigned 
tab 1409, and rejected tab 1411. In some embodiments, when referred tab 1407 is selected, manager notebook 

15 window 1401 may display claims 1403 with fraud potential indicators that exceed a minimum referral threshold for 
at least one fraud potential detection technique. In some embodiments, if the assigned tab 1409 is selected, the user 
may be allowed to assign selected claims. 

In an embodiment, the claim information shown may include selection 1405, field claim office (FCO) 
1413, claim number 1415, loss date 1417, score date 1419 (date claim was scored by the fraud potential detection 

20 system), PME Score 1421 (e.g., predictive modeling fraud potential indicator), ISE Score 1423 (e.g., identity search 
fraud potential indicator), and ORE Score 1425 (e.g., business rules fraud potential indicator). In some 
embodiments, the selection check boxes 1405 may allow multiple claims to be selected at once. In some 
embodiments, clicking on claim number 1415 may bring up a claim summary screen. In some embodiments, 
clicking on a score in PME Score 1421 column, ISE Score 1423 column, or ORE Score 1425 column may bring up 

25 a summary screen displaying why the particular score was assigned (e.g., a list of matches may be displayed if an 
ISE Score in ISE Score 1423 column is selected). 

In FIG. 14, referred tab 1407 is selected. In some embodiments, when assigned tab 1409 is selected, 
manager notebook window 1401 may display claims assigned to fraud investigators. In some embodiments, when 
rejected tab 1411 is selected, manager notebook window 1401 may display claims that have been rejected due to a 

30 high potential for fraud. 

In some embodiments, manager notebook window 1401 may include column 1405 with checkboxes that 
allow a user to select a particular claim. Manager notebook window 1401 may further display column 1413 that 
includes the field claim office of a claims organization with which a claim is associated. In certain embodiments, 
when a user selects a fraud potential indicator for a claim in columns 1421, 1423, and 1425, a summary screen of 

35 the related fraud assessment may be displayed. For example, when a user selects fraud potential indicator 1427, a 
business rules fraud potential indicator summary screen may be displayed. In some embodiments, selecting an 
"assign" graphical component 1429 may navigate a user to an assignment screen that allows the user to assign 
selected (checked) claims to an investigator. In another embodiment, selecting a "reject" graphical component 1431 
may allow a user to reject selected (checked) claims that have been referred. In some embodiments, a navigation 
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menu 1453 may be included. The navigation menu 1453 may be used to quickly shift between different components 
(e.g., Home, Manager Notebook, Investigator Notebook, Watch List, Administration, Links, and References). 

FIG. 15 illustrates an embodiment of a screen shot of a manager notebook window with the assigned tab 
1409 selected. In some embodiments, with the assigned tab 1409 selected, the user may be allowed to see the 
5 claimant's last name 1501, claimant's first name 1503, field claim office 1505, claim number 1507, loss date 1509, 
score date 1511, number of days the claim has been assigned 1513, investigation status 1515 (e.g., an SIU 
investigation), and status of the claim 1517 listed with other claim data for each claim. In some embodiments, the 
claims may be organized respective to the information in a column by selecting the column (e.g., by clicking a label 
at the top of the column). In some embodiments, multiple claim categories may be selected. In some embodiments, 

10 claims may be selected using the selection column 1527. In various embodiments, other claim data may include the 
various scores assigned to the claim (e.g., PME Score 1519, ISE Score 1521, and BRE Score 1523). In some 
embodiments, a flag indicator may be displayed next to each score with a respective color depending on the severity 
of the score (e.g., a red flag for high, yellow flag for medium, and green flag for low). In addition, a column may be 
provided to indicate whether the claim is closed. In some embodiments, when assigning a claim, a display of 

15 investigators and their corresponding regions may be displayed. The claim may be assigned to an investigator in the 
same region the claim occurred in. In addition, in some embodiments, claims may be assigned to a region. For 
example, a claim assigned to a region may be assigned to a supervisory investigator for the region to be further 
assigned by that supervisory investigator. In some embodiments, if a claim has been examined by an investigator, it 
may not be reassigned or an error message may appear when a user attempts to assign the claim to alert the user that 

20 an investigator has already started investigating the claim. In some embodiments, a filter graphical component 1525 
may be selected to change the criteria of the displayed claims. For example, a particular investigator may be 
selected and only the claims assigned to the selected investigator may be displayed. 

FIG. 16 illustrates an embodiment of a screen shot of a manager notebook window with rejected tab 1411 
selected. In some embodiments, if rejected tab 1411 is selected, the user may reject a claim. In certain 

25 embodiments, a Reject Reason dialog box may appear to allow the user to enter a reason why the claim was 
rejected. In some embodiments, a user may select from preformed reasons (e.g., Invalid BRE Score, Invalid ISE 
Score, Invalid PME Score, Low Score, Insufficient data, lack of evidence, manpower, no fraud, and liability). In 
some embodiments, pressing rejected tab 1411 may bring up a screen with rejected claims. For example, claims 
may be rejected manually by a claims adjuster, an investigator, or rejected automatically (e.g., if the score for the 

30 claim exceeds a threshold). Other reasons for rejecting a claim are also contemplated. In some embodiments, a 
rejected claim may be activated and assigned. In various embodiments, claims may be selected using the check 
boxes in Selection column 1633. In some embodiments, settings may be adjusted to adjust the number of days of 
rejected claims shown. In some embodiments, a rejected by column may display who rejected a claim. In some 
embodiments, FCO 1605, claim number 1607, loss date 1609, score date 1611, PME score 1619, ISE score 1621, 

35 and BRE score 1623 may be shown for each claim. In addition, in some embodiments, rejected reason 1625 may be 
displayed for each claim. In certain embodiments, the reason may be system generated or person generated. In 
various embodiments, the investigation status and whether the claim has been closed may also be displayed. In 
some embodiments, assign graphical component 1631 may be pressed to assign selected claims (e.g., using selection 
column 1633 to assign rejected claims). Other information may also be displayed (e.g., name of the regional 

40 manager 1635 and total number of claims displayed). 
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In various embodiments, other tabs may be used. For example, a New tab may be used to access 
information on claims that have not been assigned. In some embodiments, a user may use a New tab to access 
information on claims to be opened or reassigned back to a supervisor. In some embodiments, an Open tab may 
allow access to all open claims assigned to a particular investigator. In some embodiments, a Pending tab may be 
5 used to display claims in which the investigation is complete, but the claim is still pending. 

FIG. 17 illustrates an embodiment of a screen shot of identity search fraud potential indicator summary 
window 1701. Identity search fraud potential indicator summary window 1701 may display fraud potential 
indicators for at least one party and/or object involved in a claim. In some embodiments, the fraud potential 
indicator due to at least one database for at least one party and/or object may be displayed. Identity search fraud 

10 potential indicator summary window 1701 may display fraud potential indicators for involved people 1707, involved 
organizations 1705, involved vehicles 1703, etc. In column 1709, fraud potential indicators assessed for involved 
parties may be displayed individually. Columns 1711 may include identifying information for at least one involved 
person. Columns 1715 may display a total fraud potential indicator from each searched database for an involved 
person. For example, fraud potential indicator 1713 may be the total fraud potential indicator for John Rowan based 

15 on an SIU database. In some embodiments, selecting a fraud potential indicator may navigate a user to an identity 
search results window, which may display matches of an involved person or object with at least one database. In 
column 1717, fraud potential indicators assessed for involved organizations may be displayed individually. 
Columns 1719 may include identifying information for involved organizations. Columns 1721 may display a fraud 
potential indicator for each searched database for an involved organization. In column 1723, fraud potential 

20 indicators assessed for involved vehicles may be displayed individually. Columns 1725 and 1727 may include 
identifying information of involved vehicles. Columns 1729 may display a total fraud potential indicator from each 
search database, 

FIG. 18 illustrates an embodiment of a screen shot of identity search results window 1801. In some 
embodiments, identity search results window 1801 may display the fraud potential indicators and associated search 

25 matches of at least one involved person and/or object associated with a fraud potential indicator. For example, 
identity search results window 1801 may display the fraud potential indicators and search matches associated with at 
least one fraud potential indicator in Table 1. Summary 1805 may be displayed, for example, for the S-l fraud 
potential indicator. Summary 1805 may display fraud potential indicator 1817, involved person 1815, and matches 
1809 of involved person 1815 with a company historical database. Summary 1803 may be displayed, for example, 

30 for the S~2 fraud potential indicator. Summary 1803 may display fraud potential indicator 1813, involved person 
1811, and matches 1807 of involved person 1811 with an industry database (e.g., NICB). 

In various embodiments, tables may be presented in the identity search engine results screen to access 
information on which elements matched particular databases. For example, tables may be available for SIU, NICB, 
Sanctioned Doctors, Commercial Mailboxes, and Watch lists. In some embodiments, an indicator on a table may be 

35 selected to expand a selection on the table. For example, a "+" sign may be selected on a table to expand the 
information shown for an involved person, involved organization, and involved vehicle. In some embodiments, 
information shown for a person may include points from matches of the person to a database, the name of the 
person, the address of the person (including city, state, and zip code), the number of matches for this person in the 
claims database, the SIU database, the NCIB database, the Commercial Mailbox database, and the watch list 

40 database. In some embodiments, information shown for an involved organization may include points for matches 
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the organization received, the name of the organization (including a DBA name), the address of the organization 
(including city, state, and zip code), and matches the organization received in the SIU database, the NICB database, 
the Commercial Mailbox database, and the Watch list database. In some embodiments, information shown for an 
involved vehicle may include points the vehicle received for matches in the database, the VIN number of the 
5 vehicle, the license information for the vehicle, and the number of matches for the vehicle in the claims database, the 
SIU database, and the NICB database. Other information, including other databases, may also be presented for 
other entities involved in a request. 

FIG. 19 illustrates an embodiment of a screen shot of predictive modeling fraud potential indicator 
summary window 1901. Predictive modeling fraud potential indicator summary window 1901 may be displayed, for 

10 example, when a user selects a fraud potential indicator in column 1421 in FIG. 14. Predictive modeling fraud 
potential indicator summary window 1901 may display total predictive modeling fraud potential indicator 1905 from 
a predictive modeling engine. In some embodiments, window 1901 may display factors 1903 that were considered 
in determining total fraud potential indicator 1905. 

FIG. 20 illustrates an embodiment of a screen shot of business rules fraud potential indicator window 2001. 

15 In some embodiments, the screen shot may be displayed when the BRE score is selected in the claim summary 
screen. In some embodiments, business rules fraud potential indicator summary window 2001 may display at least 
one individual business rule fraud potential indicator used by the business rules engine to deterrnine the total 
business rule fraud potential indicator. Column 2007 may include the fraud potential indicators for individual 
business rules. Column 2009 may include a description of business rules. Total business rules fraud potential 

20 indicator 2005 may include the overall fraud potential indicator determined by the business rules engine. In some 
embodiments, selecting an individual fraud potential indicator in column 2007 and/or a business rule description in 
column 2009 may display a business rule detail window. In some embodiments, accident description dialog box 
2003 may be displayed in window 2001. 

FIG. 21 illustrates an embodiment of a screen shot of business rules detail window 2101. In some 

25 embodiments, business rules detail window 2101 may be displayed, for example, by selecting an individual fraud 
potential indicator in column 2007 and/or a business rule description in column 2009 in window 2001 shown in FIG. 
20. Business rules detail window 2101 may display the individual business rule fraud potential indicators for at 
least one business rule. Rows 2105 may each pertain to at least one involved person or object involved in the claim. 
Column 2111 may include a description of loss sustained by an involved person or object. Columns 2109 and 2107 

30 may include identifying information of an involved person or object and the fraud potential indicator assessed due to 
the loss. Business rules fraud potential indicator 2103 for the business rule may be displayed in business rules detail 
window 2101. 

FIG. 22 shows a flowchart of an embodiment of a method for displaying summary information related to 
the various engines. At 2201, at least two fraud potential indicators for an insurance claim may be assessed using at 
35 least two of an identity search engine, a predictive model engine, and a business rule engine. At 2203, information 
about an insurance claim may be displayed including identifying information for the claim and the at least two fraud 
potential indicators for the insurance claim. At 2205, engine summary information related to at least one engine 
used to assign at least one of the at least two fraud potential indicators may be displayed. 

In various embodiments, other summary screens may also be used. In some embodiments, an involved 
40 people summary screen may show a summary of involved people in a claim. In some embodiments, an involved 
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people summary screen may be presented when a user selects an individual score on an identity search engine results 
screen. In some embodiments, tabs may be displayed for each involved person and accessing a tab may bring up 
information regarding how the involved person matched information related to the tab. For example, tabs may be 
presented for the SIU, NICB, commercial mailbox, watch list, and historical claims databases. In some 
5 embodiments, a name of a person associated with the selected individual score may be displayed as an anchor record 
of a tab. For example, selecting the SIU tab may present matches for the selected individual against the SIU 
database (e.g., the percentage of similarity between the matches, the claim number in the SIU database matched, the 
name, address, and phone numbers of the person matched). Other information may also be displayed depending on 
which database tab is selected (e.g., the NICB number for the matching NICB claim, the store name of the holder of 
10 the commercial mailbox, the identifier in the Watch list, and the claim number for the claim in the claims database 
matched). 

In some embodiments, summary screens may be shown for involved organizations, vehicles, and other 

i, 

entities. FIG. 23 illustrates a flowchart of an embodiment of a method for displaying summary information related 
to involved entities. At 2301, at least two fraud potential indicators for an insurance claim may be assessed using at 

15 least two of an identity search engine, a predictive model engine, and a business rule engine. At 2303, information 
about an insurance claim may be displayed including identifying information for the claim and the at least two fraud 
potential indicators for the insurance claim. At 2305, summary information related to an involved entity related to at 
least one assigned fraud potential indicator may be displayed. For example, an involved organization summary 
screen may be displayed if the score for the involved organization is selected in the identity search engine summary 

20 screen. In some embodiments, tabs may be presented in the involved organization summary screen for different 
databases searched. For example, tabs may be available for the sanctioned doctors database, the NICB database, 
and the commercial mailbox database. In some embodiments, information shown if a tab is selected may include the 
score for the percentage of similarity of the match, the name, address, and phone number of the match, and other 
information dependent on which database has been selected (e.g., identifier for the sanctioned doctor, NICB 

25 number, and store name for the commercial mail box). 

In some embodiments, involved vehicle summary screens may be displayed by selecting the individual 
score for the involved vehicle in the identity search engine summary screen. In some embodiments, the involved 
vehicle summary screen may include tabs for various databases searched (e.g, the SIU database, the NICB database, 
the claims database, and the watch list database). In some embodiments, information about the match in the various 

30 databases (e.g., percentage of similarity of match, the VTN, the year, the make, the model, the license number, and 
the state may be displayed) may be presented along with database specific information (e.g., SIU claim number, 
NICB reference number, the claim number, and the watch list identifier). 

In some embodiments, watch list summary screens may be provided for entities being tracked by a watch 
list. In some embodiments, users may keep track of where individuals and organizations are showing up in claims. 

35 For example, watch list individual summary and watch list organization summary screens may be used. 

In various embodiments, support screens may also be used to show data about the system. For example, a 
support data screen may used to modify data in an administrative file. A user setup screen may be used to maintain 
and modify user information for users of the system (e.g., user's office, email address, and user group). A company 
setup screen may be used to maintain information about a company using the system. 
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In various embodiments, information used by the system may be maintained through an administrative 
interface. FIG. 24 illustrates a flowchart of an embodiment of a method for configuring administrative information 
for a fraud potential detection system. At 2401, at least two fraud potential indicators for an insurance claim may be 
assessed using at least two of an identity search engine, a predictive model engine, and a business rule engine. At 
5 2403, administrative information for a system may assess at least two fraud potential indicators for an insurance 
claim. In some embodiments, country information (e.g., a country code and country name), state information (e.g., 
state abbreviations, name of state, region associated with the state, and country the state is a part of), and region 
information (e.g., region identifier, region name, and additional region information) may be updated, deleted, and/or 
maintained for countries, states, and regions used by the system. In some embodiments, information about a 

10 company (e.g., company name, company address, additional addresses, company city, company state, company zip 
code, and company country), office information (e.g., office name, office address, office city, office state, office zip 
code, office country, office email address, and office region) may be updated, deleted, and/or maintained for 
companies and offices used by the system. In certain embodiments, information for investigation status (e.g., a 
status code and respective investigation status description), closure reasons (e.g., closure identifier and respective 

15 closure reason), and reason rejected (e.g., a reason identifier and respective reason the claim was rejected) may be 
updated, deleted, and/or maintained for codes and identifiers used by the system. For example, after a closure 
identifier is set-up, a user may select a code for a closure reason instead of typing out a reason for each claim. Other 
information may also be updated, deleted, and/or maintained. For example, information about a role description 
(e.g., a role identifier and a description for the role identifier), information about a user group (e.g., a user group 

20 identifier and respective user group information), and information for a user set-up (e.g., user first name, user last 
name, user identifier, user phone number, user email address, user region, user office, number of days of claims 
displayed for the user, and user group associated with the user). In various embodiments, the information may be 
accessed using a navigation bar with directory trees for the information titles. In some embodiments, signs next 
to a respective information title may be pressed to access corresponding directory information. Other selection 

25 methods may also be used. 

In some embodiments, the system for assessing the potential of fraud in requests may present results of the 
assessment in several ways. FIG. 25 illustrates a flowchart of an embodiment of a method for displaying assessment 
results. At 2501, at least one fraud potential indicator for a plurality of insurance claims may be assessed using at 
least one fraud potential detection technique. At 2503, a minimum referral fraud potential indicator may be defined 

30 such that a desired quantity of requests are referred for further investigation. At 2505, a fraud potential indicator 
may be displayed in a graphical user interface. In some embodiments, at least two fraud potential indicators may be 
assessed for a request and displayed in a graphical user interface. At 2507, a ranking may be assigned to at least one 
request relative to a probability of fraud. In some embodiments, multiple requests may be listed according to their 
ranking. In some embodiments, an investigator may investigate the requests in order of ranking (e.g., a request with 

35 a high probability of fraud may be assigned a higher ranking, and thus be considered before, a request with a lower 
probability of fraud). 

FIG. 26 illustrates a flowchart of an embodiment of a method for displaying information about requests 
using tabs. At 2601, at least two fraud potential indicators for an insurance claim may be assessed using at least two 
of an identity search engine, a predictive model engine, and a business rule engine. At 2603, information about an 
40 insurance claim may be displayed including identifying information for the claim and the at least two fraud potential 
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indicators for the insurance claim. At 2605, a tab may be displayed. In some embodiments, selecting the tab may 
display information related to the claims associated with a reference on the tab selected (e.g., a tab may have the 
name of a searched database and link a user to matches detected between an insurance claim and the database). 

Further modifications and alternative embodiments of various aspects of the invention may be apparent to 
those skilled in the art in view of this description. Accordingly, this description is to be construed as illustrative 
only and is for the purpose of teaching those skilled in the art the general manner of carrying out the invention. It is 
to be understood that the forms of the invention shown and described herein are to be taken as the presently 
preferred embodiments. Elements and materials may be substituted for those illustrated and described herein, parts 
and processes may be reversed, and certain features of the invention may be utilized independently, all as would be 
apparent to one skilled in the art after having the benefit of this description of the invention. Changes may be made 
in the elements described herein without departing from the spirit and scope of the invention as described in the 
following requests. 
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WHAT IS CLAIMED IS: 

1 . A method, comprising: 

providing at least one request data element for at least one request to a computer system; 
5 assessing at least one fraud potential indicator for the at least one request based on at least two of: 

a) at least one comparison of the at least one request data element to a datum in a 

database; 

b) at least one comparison of the at least one request data element to at least one fraud 

model; and 

10 c) at least one business rule applied to the at least one request data element; 

wherein the at least one fraud potential indicator comprises an estimate of a probability of fraud in 
the at least one request. 

2. The method of claim 1, wherein at least one request comprises at least one of: a check; an 
15 insurance claim; and a loan. 

3. The method of claim 1, further comprising assigning a total fraud potential indicator from at least 
two fraud potential indicators. 

20 4. The method of claim 2, wherein the total fraud potential indicator is assigned by adding together 

the at least two fraud potential indicators. 

5. The method of claim 2, wherein the total fraud potential indicator is assigned by averaging the at 
least two fraud potential indicators. 

25 

6. The method of claim 1, wherein at least one request data element comprises at least one of: a 
claimant's name; a witness's name; an insured's name; a medical provider's name; an involved business's name; an 
involved business's address; a date of the at least one request; a date of loss; identification of an involved vehicle; an 
inception date of a policy; an expiration date of a policy; an address of a party related to the at least one request; a 

30 detail of the loss or an accident leading to the loss; a detail of an accident; a type of accident; a number of parties 
involved; a type or degree of property damage; a type or degree of injuries; a trajectory of vehicles in a vehicle 
accident; and a location of an accident. 

7. The method of claim 1, wherein the at least one request data element comprises at least one of: 
35 information on a drawer; a payee; a date; an account number; a routing number; and involved banks. 

8. The method of claim 1, wherein the at least one request data element comprises at least one of: 
information about a loan applicant; a loan applicant's credit history; another debt of the loan applicant; an income 
level of the loan applicant; a criminal history of the loan applicant; a social security number; an address; other 
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obligations; information on an item to be purchased with loan proceeds; and information about another party 
involved in the loan. 

9. The method of claim 1, wherein the at least one comparison of at least one request data element to 
5 at least one fraud model comprises determining if at least one request data element approximately matches at least 

one fraud model. 

10. The method of claim 1, wherein the at least one comparison of at least one request data element to 
at least one fraud model comprises assigning a fraud potential indicator based on the nearness of an approximate 

10 match of a fraud model to at least one request data element. 

11. The method of claim 1, wherein assessing at least one fraud potential indicator comprises 
determining if at least one request data element approximately matches at least one fraud model, and assessing at 
least one fraud potential indicator based on which request data element is approximately matched. 

15 

12. The method of claim 1, wherein assessing at least one fraud potential indicator comprises 
detennining if at least one request data element approximately matches at least a portion of a data element in a 
database. 

20 13. The method of claim 1, further comprising referring the at least one request for review if at least 

one fraud potential indicator exceeds a threshold value. 

14. The method of claim 13, wherein the threshold value is adjusted to control the number of requests 
with at least one fraud potential indicator exceeding the threshold value. 

25 

15. The method of claim 1, further comprising: 

assigning a total fraud potential indicator based on at least one fraud potential indicator; and 
referring at least one request for review if the total fraud potential indicator exceeds a threshold value. 

30 16. The method of claim 1, wherein at least one fraud model is based on at least one historical fraud 

pattern. 

17. The method of claim 1, wherein at least one fraud potential indicator comprises at least one of: a 
numerical indicator; a ranking; and a pass/fail indicator. 

35 

IS. The method of claim 1, wherein assessing the at least one fraud potential indicator includes 
determining an absence of fraud in a request. 



19. The method of claim 1, further comprising assessing the probability of fraud in at least two 
40 requests, wherein the at least two requests are ranked in order of potential for fraud in each request. 
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20. The method of claim 1, wherein the at least one comparison of at least one request data element to 
a datum in a database comprises comparing at least one request data element to a watch list database, wherein the 
watch list database comprises at least one specified data element specified by an entity. 

5 

21. The method of claim 20, wherein the entity is notified if at least one request data element matches 
at least one specified element in the watch list. 

22. The method of claim 1, wherein at least one fraud potential indicator is assessed for the at least 
10 one request using a predetennined formula. 

23. The method of claim 22, wherein at least one fraud potential indicator is assessed using at least 
one comparison of at least one request data element to a datum in a database, wherein at least one fraud potential 
indicator is set approximately equal to a multiplier value multiplied by a loss type value multiplied by a number of 

15 * matches between the at least one request data element to the datum found in a database searched. 

24. The method of claim 22, wherein the multiplier value equals a ranking multiplied by a point 
weight multiplied by an adjustment number. 

20 25. The method of claim 1, further comprising: 

reassessing the at least one request data element for the at least one request; and 

updating the at least one fraud potential indicator for the at least one request based on the 

reassessment. 

25 26. The method of claim 1, wherein the database comprises at least one of: an insurance industry 

database; a commercial mailbox database; a company historical request database; a special investigation unit 
database; a sanctioned medical providers database; and a custom watch list database. 

27. The method of claim 1, wherein the at least one fraud model comprises a suspicious relationship 
30 between parties involved in an accident. 

28. The method of claim 1, wherein at least one business rule is used to assess a probability of fraud 
based on the details of an accident. 

35 29. The method of claim 1, wherein at least one business rule compares a date of report of a loss and a 

date of the loss. 

30. The method of claim 1, wherein at least one business rule compares a date of a reported loss and a 
date of inception of an insurance policy. 

40 
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31. The method of claim 1, wherein at least one business rule compares a date of a reported loss and a 
date of expiration of an insurance policy. 

32. The method of claim 1, wherein at least one business rule assesses a probability of fraud in the at 
5 least one request based on an injury type. 

33. The method of claim 1, wherein at least one business rule assesses a probability of fraud in the at 
least one request based on a loss type. 

10 34. The method of claim 1, wherein at least one business rule assesses a probability of fraud in the at 

least one request based on an existence of a police report. 

35. The method of claim 1, wherein at least one business rule assesses a probability of fraud in the at least 
one request based on who reported the at least one request. 

15 

36. The method of claim 1, wherein at least one business rule assesses a probability of fraud in the at 
least one request based on the number of vehicles involved. 

37. The method of claim 1, wherein at least one business rule assesses a probability of fraud in the at 
20 least one request based on time difference between the date of a check and the date the check is cashed. 

38. The method of claim 1, wherein at least one business rule assesses a probability of fraud in the at 
least one request based a comparison of a loan applicant's income to the loan applicant's assets. 

25 39. The method of claim 1, wherein assessing at least one fraud potential indicator for at least one 

insurance claim is based on an identity verification engine to verify the identification of at least one data request 
element. 

40. The method of claim 39, wherein at least one data request element verified includes an insured, a 
30 claimant, a doctor, a lawyer, or an involved business. 

41. The method of claim 39, wherein at least one of a public record and a bill is used to verify the 
identification of at least one request data element. 

35 42. A computer system, comprising: 

a CPU; and 

a memory coupled to the CPU, wherein the memory is configured to store at least one computer 
program executable by the CPU, and wherein at least one computer program is executable to: 

provide at least one request data element for at least one request to the computer system; 
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two of: 



model; and 



a request. 



assess at least one fraud potential indicator for the at least one request based on at least 

a) at least one comparison of the at least one request data element to data in a database; 

b) at least one comparison of the at least one request data element to at least one fraud 

c) at least one business rule applied to the at least one request data element; 

wherein the at least one fraud potential indicator comprises an estimate of a probability of fraud in 



43. The system of claim 42, wherein the at least one request comprises at least one of: a check; an 
insurance claim; and a loan. 



44. The system of claim 42, wherein the computer program is further executable to assess a total fraud 
potential indicator of the at least one request from at least two fraud potential indicators. 

45. The system of claim 42, wherein at least one comparison of the at least one request data element 
to the at least one fraud model comprises deterrnining if the at least one request data element approximately matches 
the at least one fraud model. 



46. The system of claim 42, wherein assessing at least one second fraud potential indicator comprises 
determining if the at least one request data element approximately matches at least a portion of a data element in a 
database. 



47. The system of claim 42, wherein the computer program is further executable to refer the at least 
one request for review if at least one fraud potential indicator exceeds a threshold value. 

48. A carrier medium comprising program instructions, wherein the program instructions are 
computer-executable to implement a method comprising: 

providing at least one request data element for at least one request to a computer system; 
assessing at least one fraud potential indicator for the at least one request based on at least two of: 

a) at least one comparison of the at least one request data element to data in a database; 

b) at least one comparison of the at least one request data element to at least one fraud 

model; and 

c) at least one business rule applied to the at least one request data element; 

wherein the at least one fraud potential indicator comprises an estimate of a probability of fraud in 
the at least one request. 

49. The carrier medium of claim 48, wherein the at least one request comprises at least one of: a 
check; an insurance claim; and a loan. 

» 
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50. The carrier medium of claim 48, further comprising assessing a total fraud potential indicator of at 
least one request from at least two fraud potential indicators. 

51. The carrier medium of claim 48, wherein at least one comparison of the at least one request data 
5 element to the at least one fraud model comprises determining if the at least one request data element approximately 

matches the at least one fraud model. 

52. The carrier medium of claim 48, wherein assessing at least one second fraud potential indicator 
comprises determining if the at least one request data element approximately matches at least a portion of a data 

10 element in a database. 

53. The carrier medium of claim 48, further comprising referring the at least one request for further 
review if at least one fraud potential indicator exceeds a threshold value. 

15 54. A method, comprising: 

assessing at least one fraud potential indicator for a plurality of insurance claims using at least one fraud 
potential detection technique; and 

defining a minimum referral fraud potential indicator such that a desired quantity of requests are referred. 

20 55. The method of claim 54, farther comprising modifying a minimum referral fraud potential 

indicator for at least two fraud potential detection techniques using at least two fraud potential indicators from at 
least one fraud potential detection technique to obtain a selected quantity of referrals for further review. 

56. The method of claim 54, wherein the minimum referral fraud potential indicator comprises a fraud 
25 potential indicator that results in a referral of at least one request for further review. 

57. The method of claim 54, wherein at least one fraud potential detection technique comprises 
predictive modeling. 

30 58. The method of claim 54, wherein at least one fraud potential detection technique comprises 

predictive modeling, and wherein assessing a probability of fraud using predictive modeling comprises assessing at 
least one fraud potential indicator based on at least one comparison of at least one request data element to at least 
one fraud model. 

35 59. The method of claim 54, wherein at least one fraud potential detection technique comprises 

identity searching. 

60. The method of claim 54, wherein at least one fraud potential detection technique comprises 
identity searching of insurance data, and wherein assessing the probability of fraud using identity search of insurance 
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data comprises assessing at least one fraud potential indicator based on at least one comparison of at least one 
request data element to additional insurance data. 

61. The method of claim 54, wherein at least one fraud potential detection technique comprises 
assessing request data for fraud from at least one business rule. 

62. A system configured to estimate liability, comprising: 
a CPU; and 

a memory coupled to the CPU, wherein the memory is configured to store at least one computer program 
executable by the CPU, and wherein at least one computer program is executable to: 

assess fraud potential indicators for a plurality of requests using at least one fraud potential detection 
technique; and 

establish a minimum referral fraud potential indicator such that a desired quantity of requests are referred. 

63. The system of claim 62, wherein the computer program is further executable to modify a minimum 
referral fraud potential indicator for at least two fraud potential detection techniques using at least two fraud 
potential indicators from at least one fraud potential detection technique to obtain a selected quantity of referral of 
requests for further review. 

64. A carrier medium comprising program instructions, wherein the program instructions are 
computer-executable to implement a method comprising: 

assessing a fraud potential indicator for a plurality of requests using at least one fraud potential detection 
technique; and 

establishing a minimum referral fraud potential indicator such that a desired quantity of requests are 

referred. 

65. The carrier medium of claim 64, further comprising modifying a minimum referral fraud potential 
indicator for at least two fraud potential detection techniques using at least two fraud potential indicators from at 
least one fraud potential detection technique to obtain a selected quantity of referral of requests for further review. 

66. A method, comprising: 

providing at least two fraud potential indicators for at least one request, wherein at least two fraud potential 
indicators are assessed using at least two fraud potential detection techniques; and 

displaying at least two fraud potential indicators in a graphical user interface. 

67. The method of claim 66, wherein clicking on at least one fraud potential indicator for the at least 
one request will display information about the at least one request. 
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68. The method of claim 66, farther comprising displaying information in the graphical user interface, 
wherein information displayed in, the graphical user interface for the request comprises at least one of: a name; an 
office; a number assigned to the request; a request date; and a score date. 

5 69, The method of claim 66, wherein at least one request is an insurance claim, and at least one 

insurance claim is organized into lists according to at least two of referred claims, assigned claims, or rejected 
claims, and wherein selecting a graphical component respective to at least one of a referred claims, assigned claims, 
or rejected claims brings up a list of claims in the corresponding list. 

10 70. The method of claim 66, further comprising changing a criteria about which claims to display by 

selecting a filter graphical component. 

71. The method of claim 66, further comprising assigning at least one request by selecting an assigned 
graphical component. 

15 

72. The method of claim 66, further comprising rejecting at least one request by selecting a reject 
graphical component. 

73. The method of claim 66, wherein at least one fraud potential detection technique comprises 
20 predictive modeling. 

74. The method of claim 66, wherein at least one fraud potential detection technique comprises at 
least one identity search of insurance claim data. 

25 75. The method of claim 66, wherein at least one fraud potential detection technique comprises 

assessing request data using at least one business rule. 

76. A system configured to estimate liability, comprising: 
a CPU; and 

30 a memory coupled to the CPU, wherein the memory is configured to store at least one computer program 

executable by the CPU, and wherein at least one computer program is executable to: 

access at least two fraud potential indicators for at least one request from the memory, wherein at least two 
fraud potential indicators are assessed using at least two different fraud potential detection techniques; and 
display at least two fraud potential indicators in a graphical user interface coupled to the CPU. 

35 

77. The system of claim 76, wherein at least one fraud potential detection technique comprises 
predictive modeling. 

78. The system of claim 76, wherein at least one fraud potential detection technique comprises at least 
40 one identity search of insurance claim data. 
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79. The system of claim 76, wherein at least one fraud potential detection technique comprises 
assessing the probability of fraud in request data using at least one business rule. 

5 80. A carrier medium comprising program instructions, wherein the program instructions are 

computer-executable to implement a method comprising: 

accessing at least two fraud potential indicators for an insurance claim, wherein at least two fraud potential 
indicators are assessed using at least two different fraud potential detection techniques; and 

displaying at least two fraud potential indicators in a graphical user interface. 

10 

81. The carrier medium of claim 80, wherein at least one fraud potential detection technique 
comprises predictive modeling. 

82. The carrier medium of claim 80, wherein at least one fraud potential detection technique 
15 comprises at least one identity search of insurance claim data. 

83. The carrier medium of claim 80, wherein at least one fraud potential detection technique 
comprises assessing request data using at least one business rule. 

20 84. A method, comprising: 

providing at least two fraud potential indicators for at least one request; and 

assigning a probability of fraud to at least one request based on at least one fraud potential indicator, 
wherein a probability of fraud of the at least one request comprises a rank of at least one fraud potential indicator of 
the at least one request relative to fraud potential indicators of another request. 

25 

85. The method of claim 84, wherein a probability of fraud is used to deterrnine an action to take 
regarding the at least one request. 

86. The method of claim 84, wherein a probability of fraud is used to determine an action to take 
30 regarding the at least one request, and wherein the action comprises expedited payment of the at least one request. 

87. The method of claim 84, wherein a probability of fraud is used to determine an action to take 
regarding the at least one request, and wherein the action comprises routine handling of the at least one request. 

35 88, The method of claim 84, wherein a probability of fraud is used to determine an action to take 

regarding the at least one request, and wherein the action comprises notification of a claims adjuster. 

89. The method of claim 84, wherein a probability of fraud is used to determine an action to take 
regarding the at least one request, and wherein the action comprises referral of the request for investigation. 

40 
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90. The method of claim 84, wherein at least one fraud potential detection technique comprises 
predictive modeling. 

91. The method of claim 84, wherein at least one fraud potential detection technique comprises 
identity searches of insurance data. 

92. The method of claim 84, wherein at least one fraud potential detection technique comprises 
assessing potential for fraud in request data using at least one business rule. 

93. A system configured to estimate liability, comprising: 
a CPU; and 

a memory coupled to the CPU, wherein the memory is configured to store at least one computer program 
executable by the CPU, and wherein at least one computer program is executable to: 
access at least two fraud potential indicators of at least one request; and 

assign a fraud potential indicator to the at least one request based on at least one fraud potential indicator, 
wherein the fraud potential indicator of a request comprises a rank of at least one fraud potential indicator of at least 
one request relative to at least one fraud potential indicator of another request. 

94. The system of claim 93, wherein a probability of fraud is used to determine an action to take 
regarding the at least one request, wherein the action comprises routine handling of the at least one request. 

95. The system of claim 93, wherein a probability of fraud is used to determine an action to take 
regarding the at least one request, wherein the action comprises notification of a claims adjuster. 

96. The system of claim 93, wherein a probability of fraud is used to determine an action to take 
regarding the at least one request, wherein the action comprises referral of the request for investigation. 

97. A carrier medium comprising program instructions, wherein the program instructions are 
computer-executable to implement a method comprising: 

accessing at least two fraud potential indicators of an insurance claim; and 

assigning a probability of fraud to at least one request based on at least one fraud potential indicator, 
wherein the probability of fraud of the at least one request comprises a rank of at least one fraud potential indicator 
of the at least one request relative to fraud potential indicators of another request. 

98. The carrier medium of claim 97, wherein a probability of fraud is used to determine an action to 
take regarding the at least one request, wherein the action comprises routine handling of the at least one request. 

99. The carrier medium of claim 97, wherein a probability of fraud is used to determine an action to 
take regarding the at least one request, wherein the action comprises notification of a claims adjuster. 
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100. The carrier medium of claim 97, wherein a probability of fraud is used to determine an action to 
take regarding the at least one request, wherein the action comprises referral of the request for investigation. 

101. A method, comprising: 

assessing at least two fraud potential indicators for an insurance claim using at least two of an identity 
search engine, a predictive model engine, or a business rule engine; and 

configuring administrative information for a system to assess at least two fraud potential indicators for an 
insurance claim. 

102. The method of claim 101, wherein the administrative information comprises at least one of: a 
country's information; an, office's information; a businesses information; a region's information; and a state's 
information. 

103. The method of claim 101, wherein configuring administrative information includes assigning an 
investigation status to a particular investigation status identifier, and wherein the investigation status identifier is 
used to refer to the particular investigation status assigned to the investigation status identifier. 

104. The method of claim 101, wherein configuring administrative information includes defining a list 
of reasons for rejecting a claim, and wherein a reason for rejecting a claim can be selected from the defined list. 

105. A system configured to estimate liability, comprising: 
a CPU; and 

a memory coupled to the CPU, wherein the memory is configured to store at least one computer program 
executable by the CPU, and wherein at least one computer program is executable to: 

assess at least two fraud potential indicators for an insurance claim using at least two of an identity search 
engine, a predictive model engine, and a business rule engine; and 

configure administrative information for a system to assess at least two fraud potential indicators for an 
insurance claim. 

106. The system of claim 105, wherein the administrative information comprises at least one of: a 
country's information; an office's information; a business's information; a region's information; and a state's 
information. 

107. The system of claim 105, wherein configuring administrative information includes assigning an 
investigation status to a particular investigation status identifier, wherein the investigation status identifier is used to 
refer to the particular investigation status assigned to the investigation status identifier. 

108. The system of claim 105, wherein configuring administrative information includes defining a list 
of reasons for rejecting a claim, wherein a reason for rejecting a claim can be selected from the defined list. 
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109. A carrier medium comprising program instructions, wherein the program instructions are 
computer-executable to implement a method comprising: 

assessing at least two fraud potential indicators for an insurance claim using at least two of an identity 
search engine, a predictive model engine, and a business rule engine; and 

configuring administrative information for a system to assess at least two fraud potential indicators for an 
insurance claim. 

110. The carrier medium of claim 109, wherein the administrative information comprises at least one 
of: a country's information; an office's information; a business's information; a region's information; and a state's 
information. 

111. The carrier medium of claim 109, wherein configuring administrative information includes 
assigning an investigation status to a particular investigation status identifier, wherein the investigation status 
identifier is used to refer to the particular investigation status assigned to the investigation status identifier. 

112. The carrier medium of claim 109, wherein configuring administrative information includes 
defining a list of reasons for rejecting a claim, wherein a reason for rejecting a claim can be selected from the 
defined list. 

113. A method, comprising: 

assessing at least two fraud potential indicators for an insurance claim using at least two of an identity 
search engine, a predictive model engine, or a business rule engine; 1 

displaying information about an insurance claim including identifying information for the claim and the at 
least two fraud potential indicators for the insurance claim; and 

displaying at least one tab, wherein selecting the at least one tab displays information related to the claims 
associated with a reference on the at least one tab selected. 

114. The method of claim 113, wherein at least one tab is associated with assigned claims, and wherein 
selecting such tab associated with assigned claims presents identifying information on claims that have been 
assigned. 

115. The method of claim 113, wherein at least one tab is associated with rejected claims, and wherein 
selecting such tab associated with rejected claims presents identifying information on at least one claim that has 
been rejected. 

116. The method of claim 113, wherein at least one tab is associated with referred claims, and wherein 
selecting such tab associated with referred claims presents identifying information on at least one claim that has been 
referred. 
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117. The method of claim 113, wherein at least one tab is associated with new claims, and wherein 
selecting such tab associated with new claims presents identifying information on claims that are new. 

118. The method of claim 113, wherein at least one tab is associated with open claims, and wherein 
5 selecting such tab associated with open claims presents identifying information on at least one claim that is open. 

119. The method of claim 113, wherein at least one tab is associated with pending claims, and wherein 
selecting such tab associated with pending claims presents identifying information on at least one claim that is 
pending. 

10 

120. A system configured to estimate liability, comprising: 

I 

a CPU; and 

a memory coupled to the CPU, wherein the memory is configured to store at least one computer program 
executable by the CPU, and wherein at least one computer program is executable to: 
15 assess at least two fraud potential indicators for an insurance claim using at least two of an identity search 

engine, a predictive model engine, and a business rule engine; 

display information about an insurance claim including identifying information for the claim and the at 
least two fraud potential indicators for the insurance claim; and 

display at least one tab, wherein selecting the at least one tab displays information related to the claims 
20 associated with a reference on the at least one tab selected. 

121. The system of claim 120, wherein at least one tab is associated with assigned claims, and wherein 
selecting such tab associated with assigned claims presents identifying information on claims that have been 
assigned. 

25 

122. The system of claim 120, wherein at least one tab is associated with rejected claims, and wherein 
selecting such tab associated with rejected claims presents identifying information on at least one claim that has 
been rejected. 

30 123. The system of claim 120, wherein at least one tab is associated with referred claims, and wherein 

selecting such tab associated with referred claims presents identifying information on at least one claim that has been 
referred. 

124. The system of claim 120, wherein at least one tab is associated with new claims, and wherein 
35 selecting such tab associated with new claims presents identifying information on claims that are new. 

125. The system of claim 120, wherein at least one tab is associated with open claims, and wherein 
selecting such tab associated with open claims presents identifying information on at least one claim that is open. 
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126. The system of claim 120, wherein at least one tab is associated with pending claims, and wherein 
selecting such tab associated with pending claims presents identifying information on at least one claim that is 
pending. 

5 127. A carrier medium comprising program instructions, wherein the program instructions are 

computer-executable to implement a method comprising: 

assessing at least two fraud potential indicators for an insurance claim using at least two of an identity search engine, 
a predictive model engine, and a business rule engine; 

displaying information about an insurance claim including identifying information for the claim and the at 
10 least two fraud potential indicators for the insurance claim; and 

displaying at least one tab, wherein selecting the at least one tab displays information related to the claims 
associated with a reference on the at least one tab selected. 

128. The carrier medium of claim 127, wherein at least one tab is associated with assigned claims, and 
15 wherein selecting such tab associated with assigned claims presents identifying information on claims that have been 

assigned. 

129. The carrier medium of claim 127, wherein at least one tab is associated with rejected claims, and 
wherein selecting such tab associated with rejected claims presents identifying information on at least one claim that 

20 has been rejected. 

130. The carrier medium of claim 127, wherein at least one tab is associated with referred claims, and 
wherein selecting such tab associated with referred claims presents identifying information on at least one claim that 
has been referred. 

25 

131. The carrier medium of claim 127, wherein at least one tab is associated with new claims, and 
wherein selecting such tab associated with new claims presents identifying information on claims that are new. 

132. The carrier medium of claim 127, wherein at least one tab is associated with open claims, and 
30 wherein selecting such tab associated with open claims presents identifying information on at least one claim that is 

open. 

133. The carrier medium of claim 127, wherein at least one tab is associated with pending claims, and 
wherein selecting such tab associated with pending claims presents identifying information on at least one claim that 

35 is pending. 

134. A method, comprising: 

assessing at least two fraud potential indicators for an insurance claim using at least two of an identity 
search engine, a predictive model engine, or a business rule engine; 
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displaying information about an insurance claim including identifying information for the claim and the at 
least two fraud potential indicators for the insurance claim; and 

displaying engine summary information related to at least one engine used to assign at least one of the at 
least two fraud potential indicators. 

5 

135. The method of claim 134, wherein at least one engine used to assign at least one of the at least two 
fraud potential indicators is a predictive modeling engine, and wherein summary information for the predictive 
modeling engine includes criteria used to assign the fraud potential indicator to the claim. 

10 136. The method of claim 134, wherein at least one engine used to assign at least one of the at least two 

fraud potential indicators is an identity search engine, and wherein summary information for the identity search 
engine includes information on at least one match used to assign the fraud potential indicator to the claim. 

137. The method of claim 134, wherein at least one engine used to assign at least one of the at least two 
15 fraud potential indicators is a business rule engine, and wherein summary information for the business rule engine 

includes information on at least one business rule used to assign the fraud potential indicator to the claim. 

138. A system configured to estimate liability, comprising: 
a CPU; and 

20 a memory coupled to the CPU, wherein the memory is configured to store at least one computer program 

executable by the CPU, and wherein at least one computer program is executable to: 

assessing at least two fraud potential indicators for an insurance claim using at least two of an identity search engine, 
a predictive model engine, and a business rule engine; 

display information about an insurance claim including identifying information for the claim and the at 
25 least two fraud potential indicators for the insurance claim; and 

display engine summary information related to at least one engine used to assign at least one of the at least 
two fraud potential indicators. 

139. The system of claim 138, wherein at least one engine used to assign at least one of the at least two 
30 fraud potential indicators is a predictive modeling engine, and wherein summary information for the predictive 

modeling engine includes criteria used to assign the fraud potential indicator to the claim. 

140. The system of claim 138, wherein at least one engine used to assign at least one of the at least two 
fraud potential indicators is an identity search engine, and wherein summary information for the identity search 

35 engine includes information on at least one match used to assign the fraud potential indicator to the claim. 

141. The system of claim 138, wherein at least one engine used to assign at least one of the at least two 
fraud potential indicators is a business rule engine, and wherein summary information for the business rule engine 
includes information on at least one business rule used to assign the fraud potential indicator to the claim. 
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142. A carrier medium comprising program instructions, wherein the program instructions are 
computer-executable to implement a method comprising: 

assessing at least two fraud potential indicators for an insurance claim using at least two of an identity 
search engine, a predictive model engine, and a business rule engine; 
5 displaying information about an insurance claim including identifying information for the claim and the at 

least two fraud potential indicators for the insurance claim; and 

displaying engine summary information related to at least one engine used to assign at least one of the at 
least two fraud potential indicators. 

10 143. The carrier medium of claim 142, wherein at least one engine used to assign at least one of the at 

least two fraud potential indicators is a predictive modeling engine, and wherein summary information for the 
predictive modeling engine includes criteria used to assign the fraud potential indicator to the claim. 

144. The carrier medium of claim 142, wherein at least one engine used to assign at least one of the at 
15 least two fraud potential indicators is an identity search engine, and wherein summary information for the identity 

search engine includes information on at least one match used to assign the fraud potential indicator to the claim. 

145. The carrier medium of claim 142, wherein at least one engine used to assign at least one of the at 
least two fraud potential indicators is a business rule engine, wherein summary information for the business rule 

20 engine includes information on at least one business rule used to assign the fraud potential indicator to the claim. 

146. A method, comprising: 

assessing at least two fraud potential indicators for an insurance claim using at least two of an identity 
search engine, a predictive model engine, or a business rule engine; 
25 displaying information about an insurance claim including identifying information for the claim and the at 

least two fraud potential indicators for the insurance claim; and 

displaying summary information related to an involved entity related to at least one assigned fraud potential 
indicator. 

30 147. The method of claim 146, wherein the summary information includes involved people summary 

information. 

148. The method of claim 146, wherein the summary information includes involved organization 
summary information. 

35 

149. The method of claim 146, wherein the summary information includes involved vehicle summary 
information. 
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150. A system configured to estimate liability, comprising: 
a CPU; and 
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a memory coupled to the CPU, wherein the memory is configured to store at least one computer program 
executable by the CPU, and wherein at least one computer program is executable to: 

assess at least two fraud potential indicators for an insurance claim using at least two of an identity search 
engine, a predictive model engine, and a business rule engine; 

display information about an insurance claim including identifying information for the claim and the at 
least two fraud potential indicators for the insurance claim; and 

display summary information related to an involved entity related to at least one assigned fraud potential 
indicator. 

151. The system of claim 150, wherein the summary information includes involved people summary 
information. 

152. The system of claim 150, wherein the summary information includes involved organization 
summary information. 

153. The system of claim 150, wherein the summary information includes involved vehicle summary 
information. 

154. A carrier medium comprising program instructions, wherein the program instructions are 
computer-executable to implement a method comprising: 

assessing at least two fraud potential indicators for an insurance claim using at least two of an identity 
search engine, a predictive model engine, and a business rule engine; 

displaying information about an insurance claim including identifying information for the claim and the at 
least two fraud potential indicators for the insurance claim; and 

displaying summary information related to an involved entity related to at least one assigned fraud potential 
indicator. 

155. The carrier medium of claim 154, wherein the summary information includes involved people 
summary information. 

156. The carrier medium of claim 154, wherein the summary information includes involved 
organization summary information. 

157. The carrier medium of claim 154, wherein the summary information includes involved vehicle 
summary information. 
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